Pilot

Mandate

opens an authorised target, navigates, reports

Reads

one target you authorised, and nothing beyond it

Produces

An observation log: what was opened, what was read, where it stopped

Rejoins the desk

Bouna never clicks a financial action, and never claims an operation ran.

1. receiving Takes the target you declared, and refuses any other.
2. reading Opens it, navigates, and reads what is on screen.
3. checking Stops at every control that would change something.
4. writing Writes what it opened, what it saw, and where it stopped.

Declared capabilities

Pilote · Dossier

Tools it may call

dossier_contribute · report_blocked

Ask it something like

“Open the authorised portal and report what you see.”

Sealed capture on fileA sealed capture of the application exists for this mandate, taken from a named build and listed in a manifest. It is evidence on file, not a run you can watch here — the roster room used to replay it, and no longer does.