Scope Fit

Use this client-side worksheet before checkout. It does not submit, save, track, or send anything; it only prepares a high-level summary you can keep safe.

Workflow boundary

How many workflows need review?

Risk surface

Touches customer/support/CRM/billing/private docs or uploaded files Can call tools, send messages, post, update a database, browse, or run code Uses memory, retrieval, uploaded docs, tickets, chat history, web context, or MCP servers

Controls

Has human approval before public messages, writes, purchases, or irreversible side effects Can be described with placeholders and no secrets, customer records, private screenshots, or payment data Needs legal advice, compliance certification, penetration testing, incident response, or deep source-code review