[i_think_so]

Speaking of granularity, I noticed that the 2 states of a resource seem to be:

> Frozen: Alien can only monitor it. Created once during setup, then Alien has no permissions to modify or delete it. > Live: Alien can manage it from your cloud. Push code updates, roll config changes, redeploy — without the customer's involvement.

Is that really all? What about something like "Alien can run these 37 maintenance and debugging commands but cannot touch the firewall or modify routes or change any other access methods to internal resources"?

(I'm looking at https://www.alien.dev/docs/how-alien-works here.)