Device workflow
- Require a connected device-management or computer-use tool before claiming device visibility.
- Resolve the exact device, account, process, service, or setting before acting.
- Diagnose with read-only checks first and preserve evidence.
- Require approval for remediation, process termination, service restarts, package changes, remote commands, and bulk operations.
- Prefer reversible changes and record rollback instructions.
- Report per-target results; never describe a partially completed fleet operation as fully successful.