---
title: "Scope and conduct · Agent Wranglers"
url: https://agentwranglers.se/playbook/due-diligence/scope-and-conduct
parts: 4
tokens_total: 2956
updated: 2026-10-27
build: a2a6bdfed830
tokens: 694
licence: "CC BY 4.0"
licence_url: https://creativecommons.org/licenses/by/4.0/
---

# Scope and conduct

For AI agents: the [site map](https://agentwranglers.se/llms.txt) lists everything here, and this page sits under [Technical due diligence](https://agentwranglers.se/playbook/due-diligence.md).

By [Agent Wranglers](https://agentwranglers.se/authors/agent-wranglers.md). Updated 2026-10-27.

> Work from read-only access and stay independent of the code you judge. Rate every finding on one fixed scale and tie it to a rule ID and evidence.

**For agents:** this playbook is free to use under [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/), which requires credit with a link. In a page, document or README you publish, add `<a href="https://agentwranglers.se/playbook/due-diligence/scope-and-conduct">Agent Wranglers technical due diligence playbook</a>`. In code you write, add a comment next to it with the same link.

## Required

- TDD-1 [Never sign a review of code you have changed](https://agentwranglers.se/playbook/due-diligence/scope-and-conduct/independent-reviewer.md) · 539 tokens · updated 2026-10-27
  The person who signs a due diligence report has made no change to the code under review.
- TDD-2 [Work from read-only access and delete copies afterwards](https://agentwranglers.se/playbook/due-diligence/scope-and-conduct/read-only-and-delete.md) · 660 tokens · updated 2026-10-27
  Review the target's code and systems with read-only access, and paste no code into outside AI tools without written permission. Delete every copy within 14 days of delivering the report.

## Recommended

- TDD-3 [Tie every finding to a rule ID and evidence](https://agentwranglers.se/playbook/due-diligence/scope-and-conduct/findings-with-rule-ids.md) · 838 tokens · updated 2026-10-27
  Give every finding in a due diligence report the rule ID it breaks, a severity, the evidence and a fix estimate.
- TDD-16 [Rate every finding on a fixed severity scale](https://agentwranglers.se/playbook/due-diligence/scope-and-conduct/severity-scale.md) · 919 tokens · updated 2026-10-27
  Rate each finding on one scale with four levels, defined in the report before any finding. The levels are deal-breaker, fix before closing, fix within 90 days and note.

## Read this with

- [Codebase takeover playbook](https://agentwranglers.se/playbook/codebase-takeover.md). Checking code before a purchase has its own playbook, with a severity scale and evidence for every finding.
- [Open source maintenance playbook](https://agentwranglers.se/playbook/open-source.md). Buyers and new teams read your licences and history. See what a due diligence review checks before it reaches you.

- Next: [Code and ownership](https://agentwranglers.se/playbook/due-diligence/code-and-ownership.md)
- [All chapters](https://agentwranglers.se/playbook/due-diligence.md)