mode

const (
	// ModeStandard is the default, no-op profile — every group is
	// allowed. Behaviour identical to a build without modes.
	ModeStandard Mode = "standard"

	// ModeRecon is read-only reconnaissance. Allows Flipper system /
	// storage / IR-rx, Marauder scan, and host-side analysis tools.
	// Forbids any RF transmit, NFC/RFID write, BadUSB run, or
	// generation tool. Pairs naturally with risk.Low, but the rule is
	// expressed as a group allow-list — callers that need to layer
	// risk filtering can read spec.Risk separately.
	ModeRecon Mode = "recon"

	// ModeIntel is Recon plus host-side analysis (vision, RAG,
	// security/host tools). Same TX prohibition; adds the tools an
	// analyst needs to correlate captures.
	ModeIntel Mode = "intel"

	// ModeStealth is the minimal-RF profile. Disables every Marauder
	// group (SSID broadcasts, deauth, evil portal, scans), Sub-GHz
	// (TX and RX), NFC, RFID, and iButton. Allows Flipper system
	// (CLI introspection), storage, and IR — the IR group is
	// transmit-capable in name but the receive primitives live in
	// the same group, so this is a deliberate compromise: operators
	// in stealth mode use ir_decode_file but should not invoke
	// ir_send_universal. Future split of GroupFlipperIR into rx/tx
	// subgroups would tighten this naturally.
	ModeStealth Mode = "stealth"

	// ModeAssault permits everything ModeStandard permits. The
	// distinction is documentational — operators flipping into
	// Assault are stating an intent so audit/UI banners can flag the
	// session. The dispatch behaviour is identical to Standard.
	ModeAssault Mode = "assault"
)