Read-only

Knot Migration analyses the source instance under absolute read-only access. This is a product invariant, not an option.

Allowed

• SELECT and schema introspection via read-only Dolibarr/DB APIs
• Module file reads for BetterReflection scan
• Local cache writes under documents/knotmigration/ (not the source DB)

Forbidden

• INSERT/UPDATE/DELETE on source business tables
• ALTER or automatic migrations on source
• Cloning wizard writes on source (target only)

Cloning

Cloning mutates only the target instance you designate — never the analysed instance.

Verification

Security reviews and PHPUnit tests include repository guards blocking mutating queries on the source connector.

Next

Anonymization Shared exports without PII leaks.