@poddingue
Borrow away - "smoke alarm" is a better name for it than anything we had, so we might borrow it right back.
Since you mentioned reading the matrix - here is the classification you would be reading, straight from the file:
grep access: dadl/xen-orchestra.dadl | sort | uniq -c
49 access: admin
21 access: dangerous
122 access: read
75 access: write
122 of the 267 tools are plain read - that is the entire surface a review-capped agent gets. The other 145 exist in the same file, but for that agent they might as well not. The whole security taxonomy is greppable plaintext - which is rather the point of a declarative format.
And if anything in the matrix looks wrong or missing, this thread is exactly the right place - real-world corrections are how it improves.
