From ce5a83db8962f6deb0afe39dff5ec441cc816da8 Mon Sep 17 00:00:00 2001 From: Spencer Hedges Date: Fri, 10 Jul 2026 21:41:31 -0400 Subject: [PATCH] Add CLAUDE.md agent guardrails for contributors --- CLAUDE.md | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) create mode 100644 CLAUDE.md diff --git a/CLAUDE.md b/CLAUDE.md new file mode 100644 index 00000000..79c492f6 --- /dev/null +++ b/CLAUDE.md @@ -0,0 +1,25 @@ +## Agent Guardrails + +You are running as an agent. Do not run destructive commands without explicit permission. + +### Git +- Never run `git push --force`, `git push -f`, or rewrite shared history +- Never delete branches (local or remote) without explicit permission +- Never commit `.env*` files, API keys, tokens, or credentials + +### Filesystem +- Never run `rm -rf` on anything outside the current project directory +- Never modify files outside the current working directory without explicit permission +- Never edit `.env`, `.env.local`, or any `.env.*` file without explicit permission + +### Dependencies +- Ask before installing new packages or running `npm install ` +- Ask before upgrading major versions or modifying lockfiles by hand + +### Database +- Never run database migrations, drops, or schema changes without explicit permission + +### Behavior +- When uncertain, stop and ask rather than guess +- Summarize planned changes before applying anything non-trivial +- Don't disable, skip, or comment out tests, linting, or type checks to make things pass