Critical-risk tools in Aos
26 of the 719 tools in Aos are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
archive_projectDestructivearchive_project
-
clear_clip_flagsDestructiveClear flags from a timeline clip.
-
clear_layerDestructiveClear a specific layer (1-indexed).
-
close_windowDestructiveClose a window.
-
delete_clip_markersDestructivedelete_clip_markers
-
delete_color_groupDestructiveDelete a color group. Clips in the group become ungrouped.
-
delete_color_versionDestructiveDelete a color version from a clip.
-
delete_faceDestructiveDelete a known face from the system.
-
delete_fusion_comp_on_clipDestructiveDelete a named Fusion composition from a timeline clip.
-
delete_layerDestructiveDelete a layer from the document.
-
delete_markersDestructiveDelete timeline markers by frame position or by color.
-
delete_media_pool_clipsDestructiveDelete clips from the media pool.
-
delete_objectsDestructiveDelete one or more objects from the Rhino document.
-
delete_projectDestructiveDelete a project (cannot be the currently loaded project).
-
delete_render_jobDestructiveDelete render job(s) from the queue.
-
delete_stillsDestructiveDelete stills from a gallery album.
-
delete_takeDestructiveDelete a take by index.
-
delete_td_nodeDestructiveDESTRUCTIVE by default: permanently remove one node from the project by path (a COMP also takes its children with it); this cannot be undone via the API. Prefer mode:
-
delete_timeline_clipsDestructivedelete_timeline_clips
-
delete_trackDestructiveDelete a track from the current timeline.
-
manage_checkpointDestructiveStore / restore / list / delete a full snapshot of a sub-network — an
-
remoteos_manage_instanceDestructiveManage lifecycle (start, stop, restart, delete) of an Incus instance. Destructive actions trigger 4-eyes approval queue.
-
remove_background_clipDestructiveremove_background_clip
-
repair_networkDestructiveBounded, autonomous repair: scan cook errors under a subtree, classify each, and plan a safe fix, capped at max_steps so it can never run away. Defaults to dry_run (PLAN only, n...
-
reset_all_gradesDestructiveReset all color grades on a clip's node graph back to default.
-
unlink_media_pool_clipsDestructiveUnlink media pool clips from their source files.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.