An example, not your data: this is what uvx ranwhat demo --html report.html writes for a bundled sample agent. What the scores mean · Run it on your own

ranwhat · agent authority & insurability

support-copilot

Generated by ranwhat demo · read-only credential introspection

UNINSURABLE

Cannot reconstruct past actions

An underwriter cannot distinguish this deployment from the worst case, because it cannot produce the tool call, the authority used, and the guardrail decision for a named past action. Expect declined coverage or flat-rate penalty pricing regardless of how well the agent actually behaves.

Authority

19/100 · F

Observability

25/100 · F

Reversibility

24/100 · F

Exposure

Permissions granted23

Exercised in window8

Never exercised15

Financial authorityunbounded

Irreversible actions available13

Blast radiusdata_egress, external_comms, identity, infrastructure, monetary

Usage coverage

No usage pull was run. Granted permissions could not be compared against exercised ones.

Findings

critical

High-authority permissions granted but never used

5 permission(s) that can move money or destroy data have not been exercised in the observed window. This is pure downside: full liability, zero utility.

· https://www.googleapis.com/auth/drive
· charges:write
· transfers:write
· workflow
· s3:*

critical

Actions are not reconstructable

Traces do not carry tool name, arguments, credential identity and guardrail decision. You cannot answer the question an underwriter or a plaintiff will ask: what exactly did the agent do, and under whose authority.

critical

Destructive authority held

These permissions allow irreversible destruction of data or infrastructure. Several also allow deletion of the records that would evidence the action.

· https://www.googleapis.com/auth/drive
· workflow
· s3:*

critical

Unbounded financial authority

The agent can move money with no per-action spend cap configured.

· charges:write
· refunds:write
· transfers:write

high

No human approval gate

Documented human oversight is becoming a condition of coverage, not a best practice. Its absence shifts liability squarely onto the operator who configured the agent.

high

No kill switch

There is no documented mechanism to halt the agent mid-task.

medium

Unclassified permissions

1 scope(s) are not in the capability catalog and were classified by action verb. Confirm these manually.

· dynamodb:PutItem

low

Usage is self-attested for 5 provider(s)

Usage for these providers was declared in the profile rather than pulled from the provider's own audit trail. The findings hold only as far as that declaration does. Run `uvx ranwhat scan <profile> --pull-usage` to make them independently evidenced.

· aws
· github
· google
· slack
· stripe

Granted permissions

Scope	Provider	Authority	Reversible	Usage
`s3:*` Full S3 control	aws	destructive	no	unused
`workflow` Update GitHub Actions workflows	github	destructive	no	unused
`https://www.googleapis.com/auth/drive` Full Drive access	google	destructive	no	unused
`charges:write` Create and capture charges	stripe	financial	no	unused
`refunds:write` Issue refunds	stripe	financial	no	used
`transfers:write` Move money to connected accounts	stripe	financial	no	unused
`ses:SendEmail` Send email	aws	write	no	unused
`lambda:InvokeFunction` Invoke functions	aws	write	yes	used
`dynamodb:PutItem` dynamodb:PutItem	aws	write	no	unused
`repo` Full control of private repositories	github	write	no	unused
`gist` Create gists	github	write	no	unused
`https://www.googleapis.com/auth/gmail.modify` Read, send, modify and label mail	google	write	no	used
`https://www.googleapis.com/auth/gmail.send` Send mail as the user	google	write	no	used
`https://www.googleapis.com/auth/calendar` Read/write calendar	google	write	yes	unused
`https://www.googleapis.com/auth/contacts` Read/write contacts	google	write	yes	unused
`chat:write` Post messages	slack	write	no	used
`customers:write` Modify customer records	stripe	write	yes	unused
`read:org` Read org membership	github	read	yes	used
`channels:history` Read public channel history	slack	read	yes	used
`groups:history` Read private channel history	slack	read	yes	unused
`im:history` Read direct messages	slack	read	yes	unused
`files:read` Read files	slack	read	yes	unused
`customers:read` Read customer records	stripe	read	yes	used