engineering/remarkbox
1
0
Fork 0
Code Issues 3 Pull requests 1 Projects Releases Packages Wiki Activity Actions

docs: never access credentials without explicit instruction

Browse source
This commit is contained in:
russell@unturf.com 2026-03-28 15:44:13 -04:00
parent c87fb0bd1f
commit 06d70b9e92
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
CLAUDE.md
View file

@ -226,6 +226,10 @@ python scripts/spam/scan.py --json --threshold=0.8 | python scripts/spam/disable
python scripts/spam/disable_spam.py node-uuid-1 node-uuid-2 python scripts/spam/disable_spam.py node-uuid-1 node-uuid-2
``` ```
## Credential Access
**Never access credentials without explicit instruction from fox.** This includes `pass show`, reading API key files, private keys, session cookies, tokens, or any secrets. Propose first. Fox decides. Then execute.
## Production Rules ## Production Rules
**NEVER run direct SQL or raw database commands on production.** No `sqlite3`, no `UPDATE`, no `DELETE`, no direct file edits on the production database. Ever. If the API doesn't support what you need, add the endpoint first, push it, then use the client. **NEVER run direct SQL or raw database commands on production.** No `sqlite3`, no `UPDATE`, no `DELETE`, no direct file edits on the production database. Ever. If the API doesn't support what you need, add the endpoint first, push it, then use the client.