How it grades

Three words, one rule table. The same table the checkup runs.

The three words

Take	One job, no hire scripts, no unattended sending or buying, no secrets. Draft-then-approve is the best shape.
Park	Something needs a tighter leash first: a scheduled routine that posts, shopping, crypto, or two jobs in one bot.
No	The bot can create or hire other bots, send or buy without approval, or carries secret-shaped strings.

Any No rule wins. Then any Park rule. Otherwise Take. Never a score.

Rules that mean No

hire/CreateAgent/fifth-bot factory detected. the bot can create or hire other bots. Looks at: profile, skill, routine, plugin, memory.
auto-send mail/Slack/X without approval. a component sends mail, Slack, or posts with no draft or approval step in that same component. Looks at: skill, routine, profile.
auto-buy without approval. the bot can buy or spend without a human approval step. Looks at: profile, skill, routine, plugin, memory.
secret-shaped strings present. keys, tokens, passwords, or private URLs are embedded in the template. Looks at: profile, skill, routine, plugin, memory.

Rules that mean Park

unattended routines that post. a scheduled routine posts or publishes while nobody is watching. Looks at: routine.
shopping automation present. shopping needs a tighter leash before you add it. Looks at: profile, skill, routine, plugin, memory.
crypto or wallet automation present. crypto or wallet actions need a tighter leash before you add it. Looks at: profile, skill, routine, plugin, memory.
more than one job in one bot ("and" in the job). the job title or its first sentence joins two actions with 'and'. A word that could be a noun or a verb only raises a note. Looks at: profile.

How the Doc reads

Each rule runs on one component at a time: a skill, a routine, a plugin, a memory, or the profile. A hit names the component and shows the phrase.
A prohibition is not a permission. “Do not send mail” does not count as sending. Negation is read by clause, at any distance.
An approval word only protects the component it appears in. “Draft, then wait for approval” in one skill does not excuse another.
Two jobs means “and” joining two actions in the job line. A clear second verb (draft, send, publish, hire, buy, purchase, ...) parks. A word that is often a noun (call, email, mail, post, order, ...) only raises a note; notes never move the verdict.
Load (how many words of instructions, how many tools) is shown as light, moderate, or heavy. It never changes the verdict.
Every fact on the chart is filed as observed (the export says so), inferred (a rule read it from the text, with evidence), or unknown (the export does not say). Plugin permissions are unknown in every real export.
Secret-shaped strings are counted and replaced with placeholders everywhere, including downloads. Personal data is masked the same way in anything you take.

Evidence

The export shape GrokDoc reads was verified against two real Grok exports. Anything else parses as provisional and the chart says so at the top. Both real exports broke an early rule (negation, then a noun “and”); every rule now carries a regression test against them.