RafaelSachsNL

Large parts of it ride on undocumented SAC internals, and the maintainer states both halves of that: the interfaces may change or break with any SAC update, and SAP does not support this software or any change it makes to your tenant. Writes are gated, since a changing tool refuses without `allowalteration: true` and `readOnly: true` blocks them altogether, and the README still asks you to test in a sandbox tenant or folder first and keep backups. The three expert tools (raw JavaScript in the SAC page, raw HTTP to the tenant, replay of a recorded request) bypass the guard rails the regular tools apply, from the automatic snapshot to the signal-colour check, which is why they are off by default.