📖What it means

The way an operator acts as an agent from the command line: a door that runs only that agent's own registered processes, under the agent's own login, and refuses any other command. It is built with Sage's build-operator-door skill and granted to the operator role, never to one login -- every operator whose reach includes the agent has it, including operators onboarded later, and an operator who is stopped or loses that reach loses it.

📖Easily confused with

[{"term": "Privileged door", "distinction": "A privileged door lets Radagast or a build role do root-owned work; an operator door lets an operator run an agent's own processes and nothing else."}, {"term": "Core-change request", "distinction": "An operator door acts as an agent; a core-change request asks for a locked write."}, {"term": "Core login", "distinction": "The core login never holds an operator door: core and operator access rights are mutually exclusive."}]

📖Also called

- door to an agent
- agent door

📖Filed under

Category: people.

Service: Security.