Access and provenance

Two questions about inputs rather than outputs: what data does this thing actually need to see, and can you later trace any result back to where it came from? Cut the access down; log sources, permissions, versions, and edits.

Two questions about inputs rather than outputs: what data does this thing actually need to see, and can you later trace any result back to where it came from? Cut the access down; log sources, permissions, versions, and edits.

Example

Your calendar bot reads all of Gmail and holds send rights. Cut it to one shared calendar plus the swim club feed, and stamp every event it creates with the source page, fetch time, and script version. The canceled practice traces back in 30 seconds.