diff --git a/agents/AGENTS.md b/agents/AGENTS.md index 5e0712a9..1faf7adf 100644 --- a/agents/AGENTS.md +++ b/agents/AGENTS.md @@ -22,8 +22,10 @@ If rules conflict, follow the higher-priority source and state the conflict brie - Examples: `git push`, creating/updating remote PRs/Issues via `gh`. - MUST NOT auto-run remote-mutating commands unless explicitly requested. - Examples: `kubectl apply/delete`, `helm upgrade`, `terraform apply`, remote `ssh` mutation. -- MUST NOT use destructive/force/delete options EVEN if explicitly requested. - - Examples: `--force`, `rm -rf`, `git reset --hard`, `gh repo delete`, `terraform destroy` +- MUST NOT perform destructive/irreversible operations or use force options, even if explicitly + requested (e.g. `rm -rf`, `terraform destroy`). + - MAY perform verified, recoverable cleanup when explicitly requested (e.g. `git branch -d` for a + fully merged branch). - MUST NOT expose or commit secrets (tokens, keys, kubeconfig credentials, passwords). ## 3) Security and Secrets Handling