Evidence quality and command safety
Collect decision-changing evidence while preserving authorization, context, and production safety.
Evidence quality standard
Evidence is useful when it is attributable, scoped, timed, reproducible enough for review, and connected to a decision. A copied error string without source and time is a clue, not a complete evidence record.
Command record requirements
| Field | Required meaning |
|---|---|
| Purpose | Which question the command answers |
| Target | Exact system, scope, or object |
| Access | Required privilege and owner |
| Safety | Read-only, controlled change, or prohibited |
| Expected signals | Outcomes and how they affect the path |
| Actual result | Captured output or observation |
| Timestamp | When the state was observed |
- Field
- Purpose
- Required meaning
- Which question the command answers
- Field
- Target
- Required meaning
- Exact system, scope, or object
- Field
- Access
- Required meaning
- Required privilege and owner
- Field
- Safety
- Required meaning
- Read-only, controlled change, or prohibited
- Field
- Expected signals
- Required meaning
- Outcomes and how they affect the path
- Field
- Actual result
- Required meaning
- Captured output or observation
- Field
- Timestamp
- Required meaning
- When the state was observed
Investigation versus change
Read-only collection can still create load, expose sensitive data, or require elevated access. Controlled change requires authorization, rollback, monitoring, and validation. OGO should explain the boundary; it should not imply that a command is safe simply because it appears in a guide.
Stop conditions
Stop when the target is uncertain, the command differs from the approved form, the result indicates a larger blast radius, rollback is unavailable, access is not authorized, or evidence preservation could be lost. Record the stop and route it to the accountable owner.
Redaction and handling
Remove secrets, tokens, personal data, customer identifiers, and unnecessary payload content before sharing. Preserve the structure required for interpretation without copying the entire environment into the dossier.