> For the complete documentation index, see [llms.txt](https://docs.khotan.com/llms.txt). A markdown version of any page is available at its `index.md` URL.

# Safety

Every catalog capability has a safety class.

- `read` — safe; freely listable.
- `write` — mutating; summarized before running.
- `destructive` — deletes or irreversible work. Prompts for confirmation in a terminal and **refuses** in non-interactive sessions unless you pass `--yes`.
- `secret` — returns credential-bearing values (env reveal, connection strings, credential rotation). Explicit-only, never printed in lists.

One `write` command is open to every key, including a read-only one: `khotan feedback submit`. It sends the Khotan team a note and changes nothing in your workspace.

Pass `--yes` only when you intend the destruction. Agents running without a TTY must pass it explicitly; otherwise the CLI exits with `confirmation_required`. See [errors](/cli/errors/).

In a repository with `.env.khotan.local`, write and destructive commands first
run `khotan workspace check`. A checkout that is behind, diverged, or
unverifiable exits with `workspace_git_stale` before any API request. See
[Workspace](/cli/workspace/).

Never log or commit secret command output.