Users wanting to create/edit/run scripts

Users increasingly write/edit Python scripts via AI (ChatGPT/Copilot) for automation. Each edit changes the hash.

Options we’re weighing:

**•**	Allow the script path/interpreter (python.exe) broadly, accept risk of arbitrary code execution with ore sign off from the company  
**•**	Require approval per hash change (high overhead, breaks user workflow)  
**•**	Block scripting entirely, force packaged/signed tools instead- not really an option. 

Running ThreatLocker/similar application control. Looking for how other MSPs handle this at policy level.

What’s your approach — path-based allow, builtin script control, or something else? Any unintended consequences worth flagging?