Observe

Reads a production system, never changes it. Its tools are an agent’s: metrics_query (PromQL), logs_query (LogQL), alerts_list (Alertmanager, with silences), cluster_get (a namespace’s pods, deployments, jobs), pod_log (a pod’s last lines).

Read-only is a grant, not a promise in a prompt: a member that may only read is given this module’s tools and not ops’s. Credentials are files read at each call through the sandbox - never a setting, a prompt or an answer, and outside every agent’s sandbox.