# ADR 0002 — Read-only First

**Status:** Accepted  
**Date:** 2026-06-13

## Context

FinanceManager has many POST/confirm endpoints and HealthManager has scripts that generate reports, register inbox files or upload artifacts. These are useful but unsafe for a first command dashboard iteration.

## Decision

MVP integrations are read-only only.

Disabled in MVP:

- POSTs
- mutations
- restarts
- report generation
- uploads
- confirms
- deletes/archives/applies

Future write actions require Preview -> Confirm -> Audit.

## Consequences

The dashboard can safely ship status visibility before gaining operational controls.

## Enforcement

`ActionDescriptor.mode` must be `link_only`, `read_only` or `blocked_in_mvp` in MVP.