From 1df3e82be934e322e0e1022b17942f4ee658aa14 Mon Sep 17 00:00:00 2001
From: Russell Ballestrini <russell@unturf.com>
Date: Sun, 4 Jan 2026 15:47:28 -0500
Subject: [PATCH] Add critical warning: never destroy prod services, use
 --redeploy

---
 CLAUDE.md | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/CLAUDE.md b/CLAUDE.md
index cc70f2b..669f017 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -1,5 +1,25 @@
 # CLAUDE.md - neopig Project Reference
 
+## CRITICAL: Unsandbox Service Management
+
+**NEVER use `--destroy` on production services.** Services contain persistent data (SQLite databases, vault files) that cannot be recovered.
+
+For redeployments, ALWAYS use `--redeploy`:
+```bash
+# CORRECT: Redeploy with updated bootstrap (preserves data)
+un2 service --redeploy SERVICE_ID --bootstrap /path/to/bootstrap.sh
+
+# WRONG: This DESTROYS all data permanently
+un2 service --destroy SERVICE_ID  # NEVER DO THIS ON PROD
+```
+
+**Current production service:** `unsb-service-*` running neopig.on.unsandbox.com
+
+If a service shows "Instance is not running" or "unreachable", try:
+1. `--redeploy` with bootstrap script (may restart the instance)
+2. Wait and check `--logs` periodically
+3. Ask the user before any destructive action
+
 ## Commit Rules
 
 **NEVER attribute Claude in commit messages.** No co-author tags, no "Generated with Claude" footers, no AI mentions. Keep commits clean and human-authored in appearance.