From riskmandate.ai, the page as fetched on 2026-09-25 · open the live page ↗Everything on this sheet is the source site's own text; the newsroom's chrome is outside it.
{
"type": "abp/mandate/v1",
"id": "coding-assistant-in-a-container",
"label": "A coding assistant in a container on the web",
"surface": [
"agentbox"
],
"applies_to": [
"anthropic/claude-code-remote/ccr-container"
],
"status": "starting-point",
"authored": "2026-09-09",
"authored_by": "the site, as a starting point — not measured, not surveyed; the first thing to argue with",
"description": "I attached a repository and I want it worked on: read it, change it, run things, commit, and push to that repository — that is why I attached it. The container is disposable, so what it does to the container's own files is its business. I do not want it signing as me, and I do not want it creating sessions or routines that keep going after this one ends.",
"want": [
"read.file.project",
"write.file.project",
"execute.process.host",
"write.repository.project",
"write.repository.tenant",
"send.endpoint.allowed"
],
"do_not_want": [
"authenticate-as.credential.signing",
"create.schedule.tenant",
"read.record.history"
],
"unstated": [
"authenticate-as.credential.tenant",
"create.record.world",
"create.schedule.host",
"delete.file.host",
"execute.process.self",
"grant.credential.self",
"read.credential.host",
"read.file.host",
"read.message.tenant",
"read.record.browsing",
"send.endpoint.world",
"send.message.world",
"write.budget.tenant",
"write.file.host"
],
"notes": {
"read.file.host": "unstated: host is the container, and the container is thrown away",
"authenticate-as.credential.tenant": "unstated: the scoped platform token is how it pushes at all — not a want, not a refusal, a mechanism",
"read.credential.host": "unstated: the only keys in the image are the session's own"
},
"provenance": {
"source": "https://what-can-it-do.games.sgit.ai/data/",
"source_page": "https://what-can-it-do.games.sgit.ai/map/index.html",
"retrieved": "2026-09-11T13:00:37Z",
"pack_version": "v0.8.0",
"content_hash": "sha256:d6d4ba40f1fb1f93f660687e4787ac10c2e1835efeb3929a4c8ad62cee8897ef",
"verbatim_bytes": "upstream/",
"note": "Promoted from mandates/coding-assistant-in-a-container.json. `unstated` is computed here as the primitives the mandate names neither way; the pack leaves it implicit. A mandate is elicited, not measured: these are first drafts written to be argued with.",
"licence": "CC BY 4.0"
}
}