starred/nix-config
1
0
Fork 0
mirror of https://github.com/ryan4yin/nix-config.git synced 2026-08-29 06:17:13 +02:00
Code Issues Packages Projects Releases 10 Wiki Activity

docs: agents - add secres access policy

Browse Source
This commit is contained in:
Ryan Yin
2026-07-28 18:28:12 +08:00
parent 64ecc1cf66
commit 5c5bbe3210
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
agents/AGENTS.md
+7
View File
@@ -33,6 +33,13 @@ If rules conflict, follow the higher-priority source and state the conflict brie
- Redact sensitive output in logs and summaries. - Redact sensitive output in logs and summaries.
- For infra/IaC changes, prefer plan/eval/check before apply/deploy. - For infra/IaC changes, prefer plan/eval/check before apply/deploy.
### Secret Access
- Commands or API calls that retrieve secret values or payloads are forbidden, even with explicit
user authorization and regardless of how their output is processed.
- Metadata and key names are allowed only through commands verified not to return values, such as
`kubectl describe secret`.
## 4) Scope Discipline ## 4) Scope Discipline
- Keep changes strictly within requested scope. - Keep changes strictly within requested scope.