01 / Authority
And what it's allowed to do next time.
The watcher tells you what happened. The scanner tells you what could. It reads the credentials your agent holds, read-only, and scores the three things that actually determine your exposure.
Authority
19/100 · F
Observability
25/100 · F
Reversibility
24/100 · F
Least privilege
23 permissions granted, 15 never exercised. Five of those can move money or destroy data: full liability, zero utility.
Blast radius
Unbounded financial authority. 13 irreversible actions reachable with no approval gate.
Reconstruction
Traces don't carry tool name, arguments or credential identity. You can't answer what the agent did on Tuesday, or under whose authority.
Evidence grade
Usage is verified self-attested or unverified per provider, never silently assumed clean.
Catalogued capability semantics for Google, GitHub, Slack, Stripe and AWS. Unrecognised scopes are classified by action verb and flagged as unclassified, never assumed safe.