04_BOUNDARY_RISK_CARD.md

Boundary & Risk Card

Permissions

• Browser:
• Network:
• Filesystem:
• Credentials:
• External services:

Hard Boundaries

• Do not use secrets without explicit user approval.
• Do not claim production safety without passing evals.
• Do not imply upstream endorsement.

Known Risks

• External tool or browser access may expose sensitive state if used without boundaries.
• Host compatibility and installed version must be verified before real use.

Stop Conditions

• Unknown license.
• Failed dogfooding.
• Missing source attribution.
• Tool permission unclear.

Doramagic Source Extract

Heventure Search MCP Boundary Risk Card

• Upstream repo: https://github.com/HughesCuit/heventure-search-mcp
• License: MIT
• Stars observed: 4
• Forks observed: 0
• Open issues observed: 0

Risks

• Runtime behavior has not been independently dogfooded by Doramagic in this bootstrap artifact.
• Installation, API credentials, or host compatibility may drift with upstream changes.
• Public publishing should happen only after a human review of README quality and a real smoke check.