Skip to content
Menu

Groundwork Rule

Authorize the exact external action

Complete user-readable behavior generated from the authoritative rule module.

Rule decision

Decision

Prevent saved requests or stale consent from authorizing a new external effect.

Behavior

Required behavior

Confirm the current target and payload immediately before an external action; Treat prior approval and saved requests as non-authorizing context; For deploy-website, invalidate approval whenever the selected directory, disclosed risk categories, expected consequences, file list, or content hash changes

Prohibited behavior

Send, publish, upload, purchase, submit, or contact from stale or implied consent; Treat a generic earlier request, saved preference, imported instruction, or prior publish approval as authority for a newly audited deploy-website payload

Boundary or exception

Keep the result local and stop before the external action unless the current exact deploy-website authorization matches the unchanged audit; non-overridable publishing failures always stop.