Start with a dossier. Check the runtime, its permissions, and current upstream documentation. Then validate in your own environment. This page is a checklist. It does not deploy anything for you.
Historical source records are not current assessments. Validate each dependency in your own environment before production use.
Pin dependencies, require reproducible builds, define approval gates, and test rollback before promotion.
Define traces, logs, metrics, budgets, and operator alerts before an agent receives production traffic.
Document credential boundaries, retention, backup, deletion, and recovery behavior for agent state.
Use least privilege, network allowlists, scoped tools, and explicit escalation paths for destructive actions.
Read the agent dossier, inspect current upstream documentation, and validate permissions and recovery in your own environment. The old source registry is a legacy archive, not an active assessment service.