batteryshark Elevate a Windows Operation
- Run
bin/windows-elevationto inspect the current identity and available mechanisms. - Read references/elevation-model.md. First determine whether elevation is actually required and narrow the command, target, and duration.
- Prefer the operating system's supported interactive administrator elevation. Preserve stdout/stderr when possible, but never trade away the visible UAC consent boundary.
- Show the exact elevated command and expected effects, obtain approval, execute it once, and verify the intended state with an unprivileged read.
- Use a scheduled task running as SYSTEM only when administrator access is demonstrably insufficient. SYSTEM is non-interactive, isolated from the desktop, and should write bounded output to a pre-created protected location; remove the temporary task and files afterward.
Use agents/elevation-reviewer.md before any SYSTEM-level plan.