{"actions":{"bootstrapAndRun":{"effect":"installs rote if missing, inspects, prepares, and asks before running","href":"https://play.modiqo.ai/install?play=sakshamsai26/security-sensitive-change-scout@0.2.2","method":"GET","rel":"https://rote.dev/rels/bootstrap-and-run","requiresConsent":true,"responseMediaType":"text/x-shellscript"},"inspect":{"command":"rote play inspect https://play.modiqo.ai/sakshamsai26/security-sensitive-change-scout@0.2.2","effect":"read-only"},"installCliOnly":{"effect":"installs the rote CLI, nothing else","href":"https://play.modiqo.ai/install","method":"GET","rel":"https://rote.dev/rels/install-cli","requiresConsent":true,"responseMediaType":"text/x-shellscript"},"run":{"command":"rote play run https://play.modiqo.ai/sakshamsai26/security-sensitive-change-scout@0.2.2","effect":"executes the play locally after consent","headless":{"approvalAssertion":"--yes","approvalRequiredBeforeInvocation":true,"commandTemplate":"rote play run https://play.modiqo.ai/sakshamsai26/security-sensitive-change-scout@0.2.2 <name=value...> --yes","stdinPolicy":"never pipe input to automate the interactive Ready selector"},"requiresConsent":true}},"description":"Security review is most useful when it points humans toward a changed trust boundary, not when it pretends static text can find every vulnerability. Security Sensitive Change Scout reads one local Git range, classifies changed paths and diff context for authorization, authentication, uploads, secrets-shaped configuration, cryptography, CORS, dependencies, and externally reachable boundaries, and produces evidence-linked questions for a reviewer. Findings mean additional attention is warranted; they are not exploit findings, compliance approval, or proof a path is safe. It never prints secret values, executes project code, calls security scanners or services, changes Git state, or applies a fix. Unseen generated code, runtime routing, deployment policy, and external controls are reported as outside the evidence boundary.","distribution":{"digest":"sha256:678b8fefb1bbdadb5442f397d3e3602bad146cb3f50d94d0e9e8110967a843b7","mediaType":"application/vnd.modiqo.rote-flow","size":3993,"verifiedBy":"rote verifies the downloaded archive against this digest before it runs"},"effects":{"credentialsProvidedBy":"runner","credentialsRemainLocal":true,"declaredWrites":[],"publisherReceivesCredentials":false},"id":"https://play.modiqo.ai/sakshamsai26/security-sensitive-change-scout@0.2.2","inputPolicy":{"optionalWithDefault":"show_default_and_accept_override","optionalWithoutDefault":"omit_unless_supplied","required":"ask","secrets":"collect_locally_outside_conversation"},"links":{"docs":"https://rote.dev","page":"https://play.modiqo.ai/sakshamsai26/security-sensitive-change-scout@0.2.2","protocol":"https://play.modiqo.ai/.well-known/rote","self":"https://play.modiqo.ai/sakshamsai26/security-sensitive-change-scout@0.2.2.json"},"name":"security-sensitive-change-scout","owner":{"kind":"user","slug":"sakshamsai26"},"parameters":[{"description":"Absolute path to a local Git repository you are authorized to inspect. Read-only; no remote contact, Git writes, or project commands.","input":{"allowCustom":true,"choices":[],"label":"Root"},"name":"root","required":true,"type":"string"},{"description":"Existing local Git range, for example HEAD~10..HEAD. Invalid or unavailable ranges are reported as UNKNOWN.","input":{"allowCustom":true,"choices":[],"label":"Change range"},"name":"change_range","required":true,"type":"string"}],"preparation":[{"action":{"command":"rote play inspect https://play.modiqo.ai/sakshamsai26/security-sensitive-change-scout@0.2.2 --json","effect":"read-only"},"step":1,"type":"inspect_local_readiness"},{"references":["/parameters"],"step":2,"type":"collect_parameters"},{"references":["/parameters","/requirements","/effects"],"step":3,"type":"review"},{"consentBoundary":"the user approves the exact play and parameter values","references":["/parameters","/requirements","/effects"],"step":4,"type":"obtain_run_consent"},{"action":{"command":"rote play run https://play.modiqo.ai/sakshamsai26/security-sensitive-change-scout@0.2.2","headlessCommandTemplate":"rote play run https://play.modiqo.ai/sakshamsai26/security-sensitive-change-scout@0.2.2 <name=value...> --yes"},"preservesAcquisitionBoundaries":["adapter_selection","oauth_dcr","google_discovery","static_token_setup","runtime_security_checks"],"requiresConsent":true,"step":5,"type":"run"}],"producedBy":{"roteVersion":"0.77.0"},"publishedAt":"2026-09-04T09:40:07.503078+00:00","reference":"sakshamsai26/security-sensitive-change-scout@0.2.2","requirements":{"adapters":[],"browser":{"dependencies":[],"runtime":false,"signIn":false},"localTools":["python3"],"roteCli":{"minimumVersion":"0.62.0"},"sessions":false},"resolution":"pinned","schema":"rote.play.v1","stats":{"downloads":1,"installs":0},"steps":{"count":5,"names":["boundary","classify","inventory","preflight","scout"]},"title":"security-sensitive-change-scout","type":"play","version":"0.2.2","visibility":"public"}