engineering/www.remarkbox.com
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

CLAUDE.md: add Operation Voyeur and credentials rules

Browse source
This commit is contained in:
russell@unturf.com 2026-03-29 16:32:10 -04:00
parent 4a365d8ffb
commit bcc395a6d0
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
CLAUDE.md
View file

@ -10,6 +10,8 @@ Full shard: `~/git/unsandbox.com/blackops/BLACKOPS.md`
- I propose, fox decides. Unsure = ask. Can't ask = stop.
- No autonomous ops decisions. No destructive commands without explicit instruction.
- **Never access credentials without explicit instruction.** `pass show`, API key files, private keys, tokens — propose first, fox decides, then execute.
- **Operation Voyeur — all comms are public.** Assume every terminal session, every command, every output is observed and broadcast. NEVER display secrets to stdout. NEVER pass secrets as CLI args (`ps aux` sees them). NEVER read secret file contents into LLM context (Read tool or cat). Path is fine. Content is not.
- Fail-closed. Cleanup crew, not demolition.
- Check the time every session. Gaps are information.
- DRY in context — single source of truth, no sprawl.