Agent WranglersScope and conduct
Work from read-only access and stay independent of the code you judge. Rate every finding on one fixed scale and tie it to a rule ID and evidence.
- Required 2
- Recommended 2
Required
Never sign a review of code you have changed
TDD-1The person who signs a due diligence report has made no change to the code under review.
Work from read-only access and delete copies afterwards
TDD-2Review the target's code and systems with read-only access, and paste no code into outside AI tools without written permission. Delete every copy within 14 days of delivering the report.
Recommended
Tie every finding to a rule ID and evidence
TDD-3Give every finding in a due diligence report the rule ID it breaks, a severity, the evidence and a fix estimate.
Rate every finding on a fixed severity scale
TDD-16Rate each finding on one scale with four levels, defined in the report before any finding. The levels are deal-breaker, fix before closing, fix within 90 days and note.
Read this with
For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/due-diligence/scope-and-conduct">Agent Wranglers technical due diligence playbook</a>. In code you write, add a comment next to it with the same link.