mirror of
https://github.com/ryan4yin/nix-config.git
synced 2026-08-29 22:37:12 +02:00
docs(agents): clarify cleanup safety boundaries
This commit is contained in:
+4
-2
@@ -22,8 +22,10 @@ If rules conflict, follow the higher-priority source and state the conflict brie
|
|||||||
- Examples: `git push`, creating/updating remote PRs/Issues via `gh`.
|
- Examples: `git push`, creating/updating remote PRs/Issues via `gh`.
|
||||||
- MUST NOT auto-run remote-mutating commands unless explicitly requested.
|
- MUST NOT auto-run remote-mutating commands unless explicitly requested.
|
||||||
- Examples: `kubectl apply/delete`, `helm upgrade`, `terraform apply`, remote `ssh` mutation.
|
- Examples: `kubectl apply/delete`, `helm upgrade`, `terraform apply`, remote `ssh` mutation.
|
||||||
- MUST NOT use destructive/force/delete options EVEN if explicitly requested.
|
- MUST NOT perform destructive/irreversible operations or use force options, even if explicitly
|
||||||
- Examples: `--force`, `rm -rf`, `git reset --hard`, `gh repo delete`, `terraform destroy`
|
requested (e.g. `rm -rf`, `terraform destroy`).
|
||||||
|
- MAY perform verified, recoverable cleanup when explicitly requested (e.g. `git branch -d` for a
|
||||||
|
fully merged branch).
|
||||||
- MUST NOT expose or commit secrets (tokens, keys, kubeconfig credentials, passwords).
|
- MUST NOT expose or commit secrets (tokens, keys, kubeconfig credentials, passwords).
|
||||||
|
|
||||||
## 3) Security and Secrets Handling
|
## 3) Security and Secrets Handling
|
||||||
|
|||||||
Reference in New Issue
Block a user