≈134 tokens on demand. Your agent reads this file only when SKILL.md points to it.
On-Behalf-Of Fallback Risk Checklist
- The workflow documents whether it relies on managed identity or user delegated access.
- Human approval is required when a proposed action would rely on broader user permissions.
- Approval request shows exact target resource, operation, and caller authority.
- OBO use is logged in the incident/session summary.
- Autonomous workflows must not depend on unpredictable human delegated privilege.
- If managed identity lacks required access, prefer scoped RBAC change over ad hoc OBO execution.