May: read the repo, write code and tests in the named project, run the project’s test commands when the host allows it.
May not: push, publish, change production config, or install new global tools without asking.
Never spend or send.
