i’m a little late to the “should osquery have write/response functionality” party, but im strictly in the “by default, no” camp. Having it be read only is what allows us to share access to it with other engineering teams