docs

docs/COMMAND_EXECUTION.md

@@ -0,0 +1,25 @@
+# GSP Windows Agent Command Execution
+
+Workspace reference: [`GSP-WORKSPACE.md`](../../GSP-WORKSPACE.md)
+
+The Panel sends remote requests to the Windows agent. The agent translates those requests into local actions inside the Cygwin runtime.
+
+## Execution model
+
+1. Receive a panel request.
+2. Validate the request.
+3. Run the requested command or lifecycle action through the agent runtime.
+4. Capture output and exit status.
+5. Return the result to the Panel.
+
+## Common actions
+
+- start / stop / restart servers
+- install or update files
+- inspect logs
+- report process state
+- run scheduled maintenance
+
+## Rule
+
+Do not allow customer input to become arbitrary shell code. The agent should only execute validated, panel-generated requests.