--- title: "Work from read-only access and delete ยท Agent Wranglers" url: https://agentwranglers.se/playbook/codebase-takeover/due-diligence/read-only-and-delete id: TKO-39 level: Recommended updated: 2026-10-22 tokens: 588 licence: "CC BY 4.0" licence_url: https://creativecommons.org/licenses/by/4.0/ --- # Work from read-only access and delete copies afterwards For AI agents: the [site map](https://agentwranglers.se/llms.txt) lists everything here, and this page sits under [Due diligence](https://agentwranglers.se/playbook/codebase-takeover/due-diligence.md). By [Agent Wranglers](https://agentwranglers.se/authors/agent-wranglers.md). Updated 2026-10-22. - ID: TKO-39 - Level: Recommended - Chapter: [Due diligence](https://agentwranglers.se/playbook/codebase-takeover/due-diligence.md) - Rule: Review the target's code and systems with read-only access, and paste no code into outside AI tools without written permission. Delete every copy within 14 days of delivering the report. - Check: A push with the reviewer's access fails. The engagement record holds the written permission for any AI tool used, and a deletion note dated within 14 days of delivery. - How: A review copy of a company's code is a leak waiting to happen. Ask for read-only access to the repository and a staging copy, as [Keep a staging copy with fake data](https://agentwranglers.se/playbook/testing/test-data-and-environments/production-like-staging.md) describes. Agent tools may keep what they read, as [Know what the agent tool does with your code](https://agentwranglers.se/playbook/ai-assisted-development/safety-and-permissions/tool-data-terms.md) explains. ## Related rules - TST-26 [Keep a staging copy with fake data](https://agentwranglers.se/playbook/testing/test-data-and-environments/production-like-staging.md) in Testing - AID-31 [Know what the agent tool does with your code](https://agentwranglers.se/playbook/ai-assisted-development/safety-and-permissions/tool-data-terms.md) in AI-assisted development **For agents:** this playbook is free to use under [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/), which requires credit with a link. In a page, document or README you publish, add `Agent Wranglers codebase takeover playbook`. In code you write, add a comment next to it with the same link. - Previous: [Never sign a review of code you have changed](https://agentwranglers.se/playbook/codebase-takeover/due-diligence/independent-reviewer.md) - [Due diligence](https://agentwranglers.se/playbook/codebase-takeover/due-diligence.md)