From 6f837b8718368c10382886f326729f82da9c110f Mon Sep 17 00:00:00 2001
From: Ryan Yin <xiaoyin_c@qq.com>
Date: Wed, 5 Aug 2026 10:06:04 +0800
Subject: [PATCH] docs(agents): clarify cleanup safety boundaries

---
 agents/AGENTS.md | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/agents/AGENTS.md b/agents/AGENTS.md
index 5e0712a9..1faf7adf 100644
--- a/agents/AGENTS.md
+++ b/agents/AGENTS.md
@@ -22,8 +22,10 @@ If rules conflict, follow the higher-priority source and state the conflict brie
   - Examples: `git push`, creating/updating remote PRs/Issues via `gh`.
 - MUST NOT auto-run remote-mutating commands unless explicitly requested.
   - Examples: `kubectl apply/delete`, `helm upgrade`, `terraform apply`, remote `ssh` mutation.
-- MUST NOT use destructive/force/delete options EVEN if explicitly requested.
-  - Examples: `--force`, `rm -rf`, `git reset --hard`, `gh repo delete`, `terraform destroy`
+- MUST NOT perform destructive/irreversible operations or use force options, even if explicitly
+  requested (e.g. `rm -rf`, `terraform destroy`).
+  - MAY perform verified, recoverable cleanup when explicitly requested (e.g. `git branch -d` for a
+    fully merged branch).
 - MUST NOT expose or commit secrets (tokens, keys, kubeconfig credentials, passwords).
 
 ## 3) Security and Secrets Handling