Safety model

• mandatory dry_run: true
• passive collectors
• no arbitrary shell commands
• no unrestricted subprocess execution
• no dynamic scripting
• no package, firewall, kernel, user or credential changes
• no remote command execution
• no self-modifying behavior

• observation only
• approved SOP requirement
• action and target allowlists
• preconditions
• dry-run protection
• mandatory verification
• circuit breaker
• maintenance mode
• append-only audit
• least privilege
• fail-safe behavior

Collectors never invoke subprocess directly. The shared helper enforces argument vectors, shell=False, captured output and a positive finite timeout; each collector still owns its fixed command authorization.

Administrators remain responsible for approving SOPs, reviewing audit records, defining maintenance policy and evaluating outcomes. PANTAW is not an autonomous administrator.