# AetherDesk Customer Safety Contract

## Default boundary

- PowerShell max access is `read-only`.
- Read-only commands may inspect workspace and system state.
- Write commands remain denied while max access is `read-only`.
- Host-write is not a UI-only toggle. It requires server max access to be changed intentionally.

## MCP and connector boundary

- MCP hook toggles persist local intent in `artifacts/aetherdesk_mcp_hooks.json`.
- Sign-in actions return an intent object or connector route.
- Secret values must never be printed in UI, receipts, logs, or manifests.

## Receipts

System Access actions write small receipts to:

`artifacts/aetherdesk_system_access_receipts.jsonl`

Each receipt records action, app/hook id, access tier, allowed/denied, route, reason, and timestamp.
