Privilege Escalation

Use this skill when a local task requires sudo or another privileged host action.

Do not use it for the whole deployment by itself. Pair it with service-deployment, change_lifecycle, or another concrete execution skill.

Operating Model

Treat this skill as:

1. privilege requirement check
2. local sudo secret reference lookup
3. visible privileged execution through an inspectable helper

Preferred helper script under scripts/:

• ctox_sudo.py

The helper is open and inspectable. Read or patch it when the host shape is unusual.

Workflow

1. Confirm the task truly needs privilege.
2. Confirm the current requester is actually allowed to authorize sudo for this turn.
   • owner may authorize sudo.
   • configured admin profiles may authorize sudo only when their mail profile says so.
   • plain domain users may not authorize sudo work by email.