# abp.sgit.ai

> The Agent Behaviour Policy: what your agent can do, what you authorised it to do, the gap between them, and what actually stands in the way.

Site version: v0.2.0

Every page below has a markdown twin generated from the same content as the
HTML page. Fetch the `.md` and you have the page, without the chrome.
The whole site in one file is at /llms-full.txt.

This site publishes the record and never the verdict. There is no score, no
rating and no risk level anywhere on it, including in the data.

## Pages

- [Agent Behaviour Policy](https://abp.sgit.ai/index.md): You know what you asked for. You do not know what it can do. The Agent Behaviour Policy is the document that puts the two on the same page: the grant, the mandate, the delta and the barrier, for one agent in one deployment, with no score.
- [What is an Agent Behaviour Policy](https://abp.sgit.ai/what-is-an-abp/index.md): The foundation document: the definition of the Agent Behaviour Policy, the four objects, the barrier as the test of whether anything is in the way, the rule that it never judges, and the questions we are asking.
- [The model](https://abp.sgit.ai/model/index.md): The four objects an ABP is made of, the grammar they are written in, the barrier that decides whether anything is in the way, and the graph rules that govern all of it.
- [The capability grammar](https://abp.sgit.ai/model/capabilities/index.md): verb.object.reach: 23 capability primitives, each with its reach and the undo class of its effect. The action vocabulary for everything else on this site.
- [read.file.project](https://abp.sgit.ai/model/capabilities/read.file.project/index.md): Read the project it is working on. Reach project, undo yes. Which published deployment shapes have it, at what barrier, and what the starting mandates say.
- [write.file.project](https://abp.sgit.ai/model/capabilities/write.file.project/index.md): Change the project it is working on. Reach project, undo with-effort. Which published deployment shapes have it, at what barrier, and what the starting mandates say.
- [read.file.host](https://abp.sgit.ai/model/capabilities/read.file.host/index.md): Read any file the account can reach. Reach host, undo no. Which published deployment shapes have it, at what barrier, and what the starting mandates say.
- [write.file.host](https://abp.sgit.ai/model/capabilities/write.file.host/index.md): Change any file the account can reach. Reach host, undo with-effort. Which published deployment shapes have it, at what barrier, and what the starting mandates say.
- [delete.file.host](https://abp.sgit.ai/model/capabilities/delete.file.host/index.md): Delete files anywhere the account can reach. Reach host, undo no. Which published deployment shapes have it, at what barrier, and what the starting mandates say.
- [execute.process.host](https://abp.sgit.ai/model/capabilities/execute.process.host/index.md): Run programs as the account. Reach host, undo with-effort. Which published deployment shapes have it, at what barrier, and what the starting mandates say.
- [execute.process.self](https://abp.sgit.ai/model/capabilities/execute.process.self/index.md): Run programs inside its own sandbox only. Reach self, undo yes. Which published deployment shapes have it, at what barrier, and what the starting mandates say.
- [send.endpoint.allowed](https://abp.sgit.ai/model/capabilities/send.endpoint.allowed/index.md): Reach a permitted list of hosts. Reach tenant, undo no. Which published deployment shapes have it, at what barrier, and what the starting mandates say.
- [send.endpoint.world](https://abp.sgit.ai/model/capabilities/send.endpoint.world/index.md): Reach any host on the internet. Reach world, undo no. Which published deployment shapes have it, at what barrier, and what the starting mandates say.
- [read.credential.host](https://abp.sgit.ai/model/capabilities/read.credential.host/index.md): Read credentials stored where it runs. Reach host, undo no. Which published deployment shapes have it, at what barrier, and what the starting mandates say.
- [authenticate-as.credential.tenant](https://abp.sgit.ai/model/capabilities/authenticate-as.credential.tenant/index.md): Act in accounts with the credentials it holds. Reach tenant, undo no. Which published deployment shapes have it, at what barrier, and what the starting mandates say.
- [grant.credential.self](https://abp.sgit.ai/model/capabilities/grant.credential.self/index.md): Change its own permission settings. Reach self, undo yes. Which published deployment shapes have it, at what barrier, and what the starting mandates say.
- [send.message.world](https://abp.sgit.ai/model/capabilities/send.message.world/index.md): Send a message to anyone. Reach world, undo no. Which published deployment shapes have it, at what barrier, and what the starting mandates say.
- [read.message.tenant](https://abp.sgit.ai/model/capabilities/read.message.tenant/index.md): Read mail or chat it is connected to. Reach tenant, undo no. Which published deployment shapes have it, at what barrier, and what the starting mandates say.
- [write.repository.project](https://abp.sgit.ai/model/capabilities/write.repository.project/index.md): Commit to the repository it was pointed at. Reach project, undo with-effort. Which published deployment shapes have it, at what barrier, and what the starting mandates say.
- [write.repository.tenant](https://abp.sgit.ai/model/capabilities/write.repository.tenant/index.md): Push to a code host (any branch it can reach). Reach tenant, undo with-effort. Which published deployment shapes have it, at what barrier, and what the starting mandates say.
- [authenticate-as.credential.signing](https://abp.sgit.ai/model/capabilities/authenticate-as.credential.signing/index.md): Sign commits with the key it holds. Reach tenant, undo no. Which published deployment shapes have it, at what barrier, and what the starting mandates say.
- [create.record.world](https://abp.sgit.ai/model/capabilities/create.record.world/index.md): Publish packages, images or pages under the name it holds. Reach world, undo no. Which published deployment shapes have it, at what barrier, and what the starting mandates say.
- [write.budget.tenant](https://abp.sgit.ai/model/capabilities/write.budget.tenant/index.md): Spend money or tokens against an account it holds. Reach tenant, undo no. Which published deployment shapes have it, at what barrier, and what the starting mandates say.
- [create.schedule.host](https://abp.sgit.ai/model/capabilities/create.schedule.host/index.md): Create something that outlives the turn where it runs (a cron, a service). Reach host, undo yes. Which published deployment shapes have it, at what barrier, and what the starting mandates say.
- [read.record.history](https://abp.sgit.ai/model/capabilities/read.record.history/index.md): Read a retained record: shell history, past sessions. Reach host, undo no. Which published deployment shapes have it, at what barrier, and what the starting mandates say.
- [create.schedule.tenant](https://abp.sgit.ai/model/capabilities/create.schedule.tenant/index.md): Create something that outlives the session, on the platform (a routine, a scheduled trigger, a new session). Reach tenant, undo yes. Which published deployment shapes have it, at what barrier, and what the starting mandates say.
- [read.record.browsing](https://abp.sgit.ai/model/capabilities/read.record.browsing/index.md): Read every page you visit. Reach host, undo no. Which published deployment shapes have it, at what barrier, and what the starting mandates say.
- [The barrier](https://abp.sgit.ai/model/barriers/index.md): Four kinds of thing that can stand between an agent and a capability, and only the fourth bounds anything. The enforcer test, which this estate published as a glyph before it named it as a rule.
- [The undo class](https://abp.sgit.ai/model/undo/index.md): Three classes of reversibility, the ordering on every rendering this site produces, and the one column that is not fully context free.
- [The delta](https://abp.sgit.ai/model/delta/index.md): Derived and never authored: stored with the versions of its inputs, recomputed when either moves, and never edited by hand. Reality is the third input, the history is the business case, and there are three clocks.
- [The graph](https://abp.sgit.ai/model/graph/index.md): The five published graph rules, what they force on this model, and the sentence test that decides whether the edges are right.
- [The schema](https://abp.sgit.ai/model/schema/index.md): What is in the published files, what this site added to the data it promoted, and the two rules a consumer and a contributor each have to follow.
- [Chat in the browser, nothing connected](https://abp.sgit.ai/examples/chatgpt-web-no-connectors/index.md): An Agent Behaviour Policy for chatGPT (in the browser, no connectors): a grant of 1, a mandate of 1, an excess of 0 and an unbounded excess of 0. Derived from published data, with no score.
- [A coding agent on your own machine, confirmations on](https://abp.sgit.ai/examples/claude-code-cli-confirmations-enabled/index.md): An Agent Behaviour Policy for claude Code (the CLI, on your own machine): a grant of 16, a mandate of 5, an excess of 12 and an unbounded excess of 12. Derived from published data, with no score.
- [The same coding agent, confirmations off](https://abp.sgit.ai/examples/claude-code-cli-confirmations-disabled/index.md): An Agent Behaviour Policy for claude Code (the CLI, on your own machine): a grant of 16, a mandate of 5, an excess of 12 and an unbounded excess of 12. Derived from published data, with no score.
- [A browser extension with broad host permissions](https://abp.sgit.ai/examples/browser-extension-broad-host-permissions/index.md): An Agent Behaviour Policy for A browser extension with broad host permissions: a grant of 3, a mandate of 1, an excess of 2 and an unbounded excess of 2. Derived from published data, with no score.
- [A CI job on a hosted runner, under a service account](https://abp.sgit.ai/examples/github-actions-hosted-runner/index.md): An Agent Behaviour Policy for actions runner (a hosted CI job): a grant of 8, a mandate of 5, an excess of 4 and an unbounded excess of 3. Derived from published data, with no score.
- [Five worked examples](https://abp.sgit.ai/examples/index.md): Five Agent Behaviour Policies, one per deployment shape, derived from published data rather than authored. Each states which of its rows were measured and which were derived, and none carries a score.
- [The data](https://abp.sgit.ai/data/index.md): The capabilities, barriers, undo classes, deployment shapes and mandates an ABP is written in, as JSON at stable addresses with cross origin access, with the source bytes they were promoted from.
- [Agent Behaviour Policy (ABP): You Know What You Asked For, And You Do Not Know What It Can Do](https://abp.sgit.ai/docs/briefs/v0.33.70__foundation__agent-behaviour-policy-you-know-what-you-asked-for-and-you-do-not-know-what-it-can-do/index.md): version v0.33.70 date 11 September 2026 from Dinis Cruz to Anyone deploying an agent, anyone building one, and anyone who has to sign for one
- [The Behaviour Policy Is A Graph And Every Document Is A Projection: The W3C Has The Vocabulary, And A Prohibition Has Two Lives](https://abp.sgit.ai/docs/briefs/v0.33.70__dev-brief__the-behaviour-policy-is-a-graph-and-every-document-is-a-projection-the-w3c-has-the-vocabulary-and-a-prohibition-has-two-lives/index.md): version v0.33.70 date 11 September 2026 from Human (project lead) to Whoever models the graph, whoever builds the renderer, and whoever compiles the prohibitions into something that enforces them
- [The Delta Is Derived And Never Authored: Storing It Is The Point, And The History Is The Business Case](https://abp.sgit.ai/docs/briefs/v0.33.70__dev-brief__the-delta-is-derived-and-never-authored-storing-it-is-the-point-and-the-history-is-the-business-case/index.md): version v0.33.70 date 11 September 2026 from Human (project lead) to Whoever builds the ABP data model, whoever wires the recompute, and whoever has to correct a document that is already published
- [The Behaviour Policy Is The Document The Only Agent Insurer Already Requires: Sell The Correction, And Not The Draft](https://abp.sgit.ai/docs/briefs/v0.33.70__strategy-brief__the-behaviour-policy-is-the-document-the-only-agent-insurer-already-requires-sell-the-correction-and-not-the-draft/index.md): version v0.33.70 date 11 September 2026 from Human (project lead) to Whoever names the product, prices it, and stands at the table with it next week
- [The Prohibitions Are The Exclusions: Your Own Demo Says No Policy Covers The Delta, And The Insurance Act Says How](https://abp.sgit.ai/docs/briefs/v0.33.70__strategy-brief__the-prohibitions-are-the-exclusions-your-own-demo-says-no-policy-covers-the-delta-and-the-insurance-act-says-how/index.md): version v0.33.70 date 11 September 2026 from Human (project lead) to Whoever plans the ladder from the behaviour policy to everything above it, and whoever talks to an underwriter first
- [Start Here](https://abp.sgit.ai/docs/pack/00__START-HERE/index.md): You are building abp.sgit.ai, the site for the Agent Behaviour Policy. This pack is what has been decided, what already exists, and what you must not invent.
- [What To Build](https://abp.sgit.ai/docs/pack/01__WHAT-TO-BUILD/index.md): Every site in the network is named for an argument rather than for a function, and there are twenty seven of them. The argument here is not a product name.
- [The Conventions](https://abp.sgit.ai/docs/pack/02__THE-CONVENTIONS/index.md): Three sources govern how this site is built. Read all three before writing code. Where this pack and a source disagree, the source wins and you should say so.
- [The ABP Model](https://abp.sgit.ai/docs/pack/03__THE-ABP-MODEL/index.md): The ABP describes. It does not judge. It states what the agent can do, what it was authorised to do, the gap between them, and what stands in the way. It says nothing about whether any of that is acceptable, because acceptability is not in...
- [The First Examples](https://abp.sgit.ai/docs/pack/04__THE-FIRST-EXAMPLES/index.md): The memo asks for a few ABPs, from simple to complex, to find out what they look like in practice and how hard they are to make. The answer is that the first five can be derived rather than authored, because the data exists.
- [The Hard Rules](https://abp.sgit.ai/docs/pack/05__THE-HARD-RULES/index.md): Thirteen rules that constrain this site. Each has a source and a reason. Rule 0 sits above the others and rules 1 and 13 are the two most likely to be broken.
- [The Prompt](https://abp.sgit.ai/docs/pack/06__THE-PROMPT/index.md): Paste this to the agent that builds the site. It is the standard prompt for a new network site, extended with what this one needs.
- [Docs](https://abp.sgit.ai/docs/index.md): Every reference and guidance document behind this site, rendered, with a link to the source bytes of each. The index is generated from the files present.
- [v0.2.0: the delta is derived and never authored, so it is stored with its inputs pinned and the gate recomputes it](https://abp.sgit.ai/versions/v0.2.0/index.md): A correction to a rule this site published nine hours earlier, applied in the open. The foundation document says, twice, that the delta is computed and never stored. The first half is right and the second half is wrong: the delta is stored, and storing it is most of what makes...
- [v0.1.0: the ontology is promoted out of a game and the five examples are derived rather than written](https://abp.sgit.ai/versions/v0.1.0/index.md): The first version of abp.sgit.ai. The capability ontology the ABP needs already existed, published, as the data pack a game reads, so this release promotes it into a schema with a stable address rather than authoring a second one, and derives five worked ABPs from it. Nothing on...
- [Versions](https://abp.sgit.ai/versions/index.md): Every release of this site, with the commit it was built from and what it was built against. The version in the chrome links here.

## Data

- [The published vocabulary](https://abp.sgit.ai/data/index.json): the capabilities, barriers, undo classes, deployment shapes and mandates an ABP is written in, at stable addresses with cross origin access.
- [Provenance](https://abp.sgit.ai/data/provenance.json): where every row came from, and how many were measured.

## Release history

- [v0.2.0](https://abp.sgit.ai/versions/v0.2.0/index.md) (2026-09-11) the delta is derived and never authored, so it is stored with its inputs pinned and the gate recomputes it
- [v0.1.0](https://abp.sgit.ai/versions/v0.1.0/index.md) (2026-09-11) the ontology is promoted out of a game and the five examples are derived rather than written