Sandbox New Adapters Behind Read-Only Capability Sets First

A new adapter that starts read-only can prove its behavior with production-shaped traffic while remaining structurally incapable of causing a write incident.

The question with a new adapter is not whether it works in the demo. It is what it does at volume, under errors, on a Tuesday. Read-only scope lets you find out safely.

The graduation path

• Start with reads and observe error, latency, and retry patterns.
• Grant narrow writes after a defined clean-observation window.
• Treat any denial anomaly as a reset of the graduation clock.

Use the adapter system, trust levels, and integration guide to let adapters earn write scope with a read-only track record.