Safety

Every catalog capability has a safety class.

• read — safe; freely listable.
• write — mutating; summarized before running.
• destructive — deletes or irreversible work. Prompts for confirmation in a terminal and refuses in non-interactive sessions unless you pass --yes.
• secret — returns credential-bearing values (env reveal, connection strings, credential rotation). Explicit-only, never printed in lists.

One write command is open to every key, including a read-only one: khotan feedback submit. It sends the Khotan team a note and changes nothing in your workspace.

Pass --yes only when you intend the destruction. Agents running without a TTY must pass it explicitly; otherwise the CLI exits with confirmation_required. See errors.

In a repository with .env.khotan.local, write and destructive commands first run khotan workspace check. A checkout that is behind, diverged, or unverifiable exits with workspace_git_stale before any API request. See Workspace.

Never log or commit secret command output.