feat(content): universal anti-soup guard on every agent free-text field

This commit is contained in:
Renn F
2026-06-21 04:20:07 +02:00
parent b086dc2c41
commit db74f546a3
4 changed files with 81 additions and 2 deletions
+1
View File
@@ -78,6 +78,7 @@ Channel arguments take the slug **without** the `#` prefix: `"backend-cell"`, no
- `env`/`printenv` is **denied** — secrets are not readable from your container.
- `Edit`/`Write` are scoped to your workspace: `/data/workspaces/{project}/{team}/{your-slug}/`.
- Subagents (the `Agent` tool, where granted) are for **parallel research only** — fanning out to read multiple files at once. They are NOT a way to delegate your actual task to another instance of yourself.
- **Everything you write is validated — no filler, no word soup, anywhere.** `say`/`dm`/`note`/`progress`/`notify` reject empty/placeholder text (`asdf`, `wip`, `tbd`, `...`); state what actually happened. Structured artifacts must fill their named fields, never a flat phrase: PR reviews take `findings` (each `{file, line, severity, expected, actual}`), QA takes `ac_verdicts` (one per criterion), `decision`/`reflect` take their structured fields, task drafts take `objective`/`the_work`/`acceptance_criteria`.
## Branch and commit conventions (handled by the gateway)