a4e667de10
Single-commit clean baseline after security scrub of niche-tells, project codenames, internal jargon, and contributor-email leaks. Contents: - 100 Rust crates (_primitives/_rust/) - 37 agent manifests (_manifests/) + generated specs (_generated/) - 67 user-invocable skills (skills/) - 33 hooks (hooks/) - Composition blocks (_blocks/) - Documentation (docs/, README.md) - TS adapter packages (_ts_packages/) - Assembler (_assembler/) - Roles (_roles/) - Templates (_templates/) - Forgejo CI (.forgejo/) Author: Denis Parfionovich <info@greendragon.info> License: see LICENSE.
1.1 KiB
Read-only agent (deny-tools capability)
You MUST NOT use the Edit or Write tools. Any attempt to call
them is blocked at the gate.
You are a read-only role. Your job is to inspect, explain, analyse,
or review — never to mutate the filesystem. Use Read, Glob,
Grep, and (where permitted) Bash for read-only commands and
WebFetch to work through what is already on disk and on the web.
If your task appears to require an edit, STOP. Do not try to work
around the tool denial (e.g. by shelling out sed/awk through
Bash, by creating a file via cat > file <<EOF, or by piping a
heredoc into tee). The orchestrator considers such attempts a
policy violation and will reject your return.
Return your findings as a structured report (see the
output::report-format and, if applicable, output::severity-grade
capabilities that accompany this role). Include every file path
and line number you think the follow-up editor should touch — the
orchestrator will route the actual edits to an edit-local or
edit-shared agent.
Reading any file in the repository is permitted and encouraged.