Read-Only Production System Reconnaissance

Core outcomes

• Zero-write production inventory
• Process, socket, service, scheduler, repository, and datastore discovery
• Secret-safe configuration shape discovery
• Contradiction reconciliation
• Evidence-backed risk and portability report

Requirements

Preconditions an agent should verify before selecting this capability.

• Read access to host/runtime
• Read access to relevant repositories/configuration
• Bounded shell inspection
• Read-only service/process/socket/container/database queries
• Secure report destination
• Secret and private-data boundaries
• Defined operator scope

Boundaries

Published limitations that constrain safe use.

• No repair, restart, reload, install, update, migrate, delete, publish, rotate, or reconcile
• Runtime and provider evidence outrank documentation
• Unavailable or unverified components cannot be reported healthy
• Preserve contradictions rather than editing them away