Command one · assess before you enforce · interpose scan
Runinterpose scan in a project root walks the repo and lists every file an agent could touch, scored by how sensitive each one looks by filename and path pattern. It does not read file contents, so it is a blast-radius map, not a found-secrets claim. Read only, writes nothing unless you pass --save. Add --path=../other-repo --format=json to point it elsewhere or pipe into tooling.
SafeIt refuses to walk a directory that is not a project root, no package.json or .git, unless you pass --path or --force. So it never crawls a home directory by accident. Symlinks are skipped.
ReadEach file is flagged high, medium, or low confidence. High means two or more sensitivity rules matched, medium is one strong match, low is everything else. Start policy from the high and medium rows, so you tighten forbid.targets before it matters, not after.