readonly
Inspection only. Mutating tools are blocked before execution.
Power is useful only when the boundary is explicit.
AgentForge Ops treats remote execution as a security product, not just an integration detail.
restricted
Allowed operations are constrained by policy and command boundaries.
unrestricted_except_ssh_key
Broad operations while protecting SSH key material and key-management paths.
unrestricted
Full operator-authorized capability; intended only for tightly controlled environments.
Operational principle
Strict host verification, least-privilege SSH users, explicit security modes and server-side secrets remain the recommended baseline. Commercial packaging does not remove the documented runtime security limitations; it adds deployment/support and team-oriented controls around them.