Skip to main content
Audit and planning are read-only. They let application policy decide whether a clean workflow belongs in this environment before the engine starts work.

Check returns a report

Findings do not throw. A spawn failure does. This distinction lets an editor or CI job render the whole refusal in one pass.

Read the full admission shape

min_path_total_usd is a floor, not a ceiling. A task with usd: null is unpriced, not free. Read has_unbounded beside the number.

Ask for the machine plan

ADMISSION ยท ZERO EXECUTION
An older binary that predates the machine dry-run receives a teaching error that names the required engine floor. A dirty file rejects with its check report attached.

Continue

Run and cancel

Execute only after admission.

Security boundary

Turn permits and cost into application policy.

Machine surfaces

Read the version-envelope law.

Cost honesty

Understand floors, ranges and unpriced work.