Controlled action demo · SYSTEM CHANGE · HIGH RISK

Approve one exact system action—not permanent terminal access.

See a requested command made visible, checked against policy, limited to one approved target, executed once in a synthetic sandbox, and closed with proof.

All controlled action demos How action control works Scope governed operator actions

01 · Declared intent

An operator agent requests one system command.

{
  "actor": "agent:solyn",
  "action": "run_command",
  "target": "sandbox:demo-ops",
  "command": "systemctl restart example-worker",
  "reason": "recover a synthetic degraded worker",
  "riskLevel": "high"
}

The request names the host class, command purpose, expected effect, and risk before policy evaluates it.