The manifest

sub manifest emits the permission set as JSON so tools like Centcom can read, compare and approve a script without parsing it.

{ "needs": { "read": ["./src"], "write": ["./src"], "run": ["npm test", "git commit"], "net": [] } }

The output is deterministic, so a saved allow-list can match a manifest by hash.