pentest-agent-policy

Pre-engagement policy auditing validates executor settings, bash-gate configurations, and redaction policies against risk gates to ensure pentest authorization requirements are met before active work begins.

Pre-engagement policy auditing is a read-only safety review that maps intended tools and phases to risk levels, verifying that dangerous categories and execution policies are correctly configured for security workflows.

Unlock guidance provides a compliant path for requesting access to disabled-default categories like C2 or wireless testing, ensuring appropriate authorization and approval gates are met before execution.

Yes, the policy posture review operates across various engagement modes to verify that dangerous categories and execution policies are correctly configured for the current environment.

Yes, the policy posture review validates redaction policies and executor settings against the current environment to ensure security assessments adhere to defined risk gates and authorization policies.

The read-only safety review provides structured risk assessment and policy validation but does not execute active testing, meaning it cannot unlock categories itself or modify the pi-pentest-agent configuration directly.