The floor for any project an agent works in: process hygiene, credential handling, and dependency discipline.
Assumes:A project with a shell, a package manager and at least one credential. Nothing about the language or platform.
Download 3 documents + MANIFEST
Why process-selection commands over-select silently, and the inspect-then-kill pattern that catches it.
Getting a credential from its store into its destination without it ever appearing as text the assistant emits.
What an agent should check before installing a dependency, and which files it must never modify without a shown diff.
Shipped inside the archive. Reproduced here so you can read it before downloading.
# Security baseline
The floor for any project an agent works in: process hygiene, credential handling, and dependency discipline.
Source: https://the-handover.org/packs/security-baseline
Built: 2026-08-29
Documents: 3
Licence: Handover-1.0 (© Captivated Ltd) — https://the-handover.org/licence
## What this pack assumes
A project with a shell, a package manager and at least one credential. Nothing about the language or platform.
## Contents
### docs/killing-processes-shared-machine.md
Title: Killing processes safely on a shared machine
Summary: Why process-selection commands over-select silently, and the inspect-then-kill pattern that catches it.
Authors: Leon Mallett, Founder of Captivated Ltd (captivated.online)
Source: https://the-handover.org/docs/killing-processes-shared-machine
Last confirmed working: 2026-08-07
Marks: Hard-Won
SHA-256: 90ff2b46bb463a62d224a958d406f19d4614cb94ec137e479b2055fde616fe05
### docs/live-secrets-in-ai-sessions.md
Title: Handling live secrets in AI coding sessions
Summary: Getting a credential from its store into its destination without it ever appearing as text the assistant emits.
Authors: Leon Mallett, Founder of Captivated Ltd (captivated.online)
Source: https://the-handover.org/docs/live-secrets-in-ai-sessions
Last confirmed working: 2026-08-07
Marks: Hard-Won
SHA-256: 7a47848943a345cbeadf47f9c7c29dc4832115dee9261f0ef851c1bb7f6d9a8a
### docs/supply-chain-baseline-ai-development.md
Title: Supply-chain security baseline for AI-assisted development
Summary: What an agent should check before installing a dependency, and which files it must never modify without a shown diff.
Authors: Leon Mallett, Founder of Captivated Ltd (captivated.online)
Source: https://the-handover.org/docs/supply-chain-baseline-ai-development
Last confirmed working: 2026-08-07
SHA-256: 6c30cf40c85876977a7893c5b20713456adf4e009c6c8f1a43858b14856af247
## Licence and attribution
Copyright is retained by the authors and Captivated Ltd. You may use these
documents in your own projects — private, public, commercial, client work —
and adapt them to fit. What is reserved is republishing the collection as a
collection: mirrors, or catalogues assembled out of these documents.
Each file carries an attribution header naming its authors, its source and the
date it was last confirmed. Keep it: once a file has been separated from this
pack, that header is the only thing that still credits the person who wrote it.
## Verifying this pack
Each SHA-256 above is of that file exactly as it appears in this archive. Verify one
with `shasum -a 256 <file>`; a file whose hash does not match was modified after
packaging.
Document files are byte-reproducible: the same source document, at the same
confirmation state, always produces the same bytes. The archive as a whole is not,
because this manifest records the build date above — two builds on different days
differ in that line and therefore in the archive, while every document file inside
stays identical. The per-file hashes are the thing to check.