Hi Paul, Thanks for drafting this. A named restricted profile for embedders (groovysh, console, jupyter, MCP-style hosts) is overdue, and calling out that it is not a full sandbox keeps the scope honest. A later-phase checker alongside SecureASTCustomizer (and a Groovy 7 rename/deprecation of the current customizer if we take that chance) sounds workable. I will read the draft GEP properly and comment there and on any linked PR.
Cheers, Daniel Sun
