How Tool Gating Works
The four risk tiers that keep every action operator-approved.
Nothing in the arsenal runs on autopilot where it matters. Each tool is risk-classified, and the more consequential the action, the higher the bar before it fires. Human-in-the-loop, always.
The four tiers
- Ungated: read-only and passive. Runs freely.
- Operator approval: propose, wait, execute, document. A human says go.
- Credential-gated: credential attacks (spray, crack, relay) held behind explicit approval.
- Destructive-gated: state-changing or data-touching actions clear the highest bar of all.