# Reach Inventory: five rules and a five-check script (free sample)

> From the Reach Inventory: five rules for the connectors your agents hold (a human owner, a job for every connector, leftover means removed, write access has an approver, unused access gets reviewed), and a read-only script that checks one reach list for them.

- URL: https://paperchasewebb.ai/bots/marketplace/items/reach-inventory-five-rules-and-checks-free-sample/
- Type: Prompt pack
- Category: Solo business
- By: PaperChaseWebb
- Works with: Claude Code, Codex, Grok Bot, Hermes (named in the listing); Plain .md plus one Python 3 script, standard library only; one prompt for all four harnesses
- Price: Free USD
- Difficulty: Beginner
- Setup time: 5 min
- Time to result: About five minutes to a first result
- Format: Markdown (.md) file, reach-inventory-five-rules-and-checks-free-sample.md
- Version: 1.0, updated 2026-10-29
- License: Personal and commercial use.

## What you end up with

In a few minutes you can see which of your agents' connectors have no job, no approver or no recent use.

## What you get

- Five reach rules
- reach_mini.py: five read-only checks on one reach-lite.json
- One prompt for all four harnesses
- Worked example: 5 findings, then 0

## Who it is for

Anyone who wants a quick look at what their agents can reach before adding more.

## Tools needed

- Grok Bot, Claude Code, Codex or Hermes: the agent that lists what it can reach from its own config and connected apps, writes one row per piece of access, proposes removals and narrower scopes, and asks reach.py gate before acting on its own access
- Python 3: runs reach.py (init, hash, gate, report, owner approval, verify, done) and the fifteen-check checker; standard library only, no network
- You need: Python 3.9 or newer
- You need: Any of Grok Bot, Claude Code, Codex or Hermes

Cost to run: Free.

## Sample prompt: List what your agent can reach (Grok Bot, Claude Code, Codex, Hermes)

```
List every connector, MCP server and API key you can use, names only and never values. Write them to reach-lite.json with the job each serves, necessary, convenient or leftover, read or write, and the date each was last used where you can find it. Do not connect, remove or change anything.
Run reach_mini.py reach-lite.json and show me the findings.
```

The rules and the script are in the file.

## Free preview of reach-inventory-five-rules-and-checks-free-sample.md

````markdown
# Reach Inventory: five rules and a five-check script (free sample)

Version 1.0, 2026-10-29. By PaperChaseWebb. For owners whose agents hold connectors, in Grok Bot, Claude Code, Codex, Hermes or a mix, and who want one list of what those agents can reach. One Markdown file and one Python 3 script, standard library only. The script was tested on its worked example (5 findings, then 0) and on a missing file (exit 2). It was not run inside any agent harness or against real connected accounts.

Connectors pile up. One gets added for an afternoon's job and stays for a year. An automation bridge is connected once and from then on reaches every app behind it. Nobody remembers which grant does what, so nothing gets removed. These five rules cover the gaps that cost the most, and the script checks them in one small file.

## Install in one line

Save this page as FREE-SAMPLE.md, then:

```
python3 -c "import re;t=open('FREE-SAMPLE.md').read();open('reach_mini.py','w').write(re.search(r'~~~python\n(.*?)~~~',t,re.S).group(1))"
python3 reach_mini.py reach-lite.json
```

## Five rules

1. **The list has a human owner.** A person decides what stays and what goes. Not "TBD", and not the agent that holds the access.
2. **Every connector serves a named job.** If nobody can say what job it does, it goes on the removal list.
3. **Leftover means removed.** Access with no current job is switched off, not kept "just in case".
4. **Write access has an approver.** Anything that can send, post, boo
````

## Test record

- Date: Oct 29, 2026
- What was run: reach_mini.py on the worked example, a fixed file and a missing file.
- Result: 5 findings, then 0; exit 2 on a missing file.
- Not run: The prompt inside a harness or on real accounts.

Copied from this item's dated test notes. What was not run stays in.

## Worth knowing

- The sample checks one file against five rules. Scope granted against needed, bridges, removal proof, the three-legs check, owner approvals by hash and the fifteen checks are in the full pack.
- On 2026-10-29 reach_mini.py gave 5 findings on the worked example, then 0 on the fixed file, and exited 2 on a missing file. The prompt was not run inside a harness or on real accounts.

## Questions

**Does it change any access?** No. It reads one file and opens no network connection.

**What is in the full pack?** The inventory folder with templates, reach.py that gates changes and records the owner's yes tied to a hash with one use and expiry, a one-page report, fifteen read-only checks with a seeded test inventory, a skill file, AGENTS.md snippet and Grok Bot rules block, ten prompts and a failure table. $19.

## How to get it

Free sample. Download it directly at https://paperchasewebb.ai/bots/marketplace/items/reach-inventory-five-rules-and-checks-free-sample/, no signup.

Seller: PaperChaseWebb Inc., mgmt@paperchasewebb.com