AGENTS.md: prohibit warded engineers from debugging or iterating against live deployments #467

Closed

coilyco-ops wants to merge 1 commit from issue-466 into main

coilyco-ops commented

2026-07-11 02:30:41 +00:00

Member

Adds the Never debug or iterate against a live deployment rule to the ## Agent rules section of AGENTS.md, sibling to "Run until a wall worth a human", per the issue. A warded engineer runs in a sealed, ephemeral clone with no live-cluster access, so debug/tune/"fix until green" against a live deployment is a hard prohibition, the same class of wall as force-push or data loss. Deploy work matches precedent and copies the exemplar - anything genuinely needing live verification goes to the operator through an interactive-labeled issue.

AGENTS.md - the new rule, house voice (no em-dashes, no semicolons, bold anchors), cross-referencing the deploy precedent doc (docs/deploy-patterns.md in coilyco-bridge/deploy, forthcoming) and the burndown repo-exclusion filter (coilyco-flight-deck/ward#1105) as structural backstops.
pyproject.toml - agents_md_max_chars raised 14500 -> 16000 with the in-context rationale comment, following the three prior documented bumps: always-composed doctrine cannot move to docs/*.md without dropping out of load.
CLAUDE.md is @AGENTS.md, so no mirror edit is needed.

Validation: full pre-commit suite passes (ward pre-commit-all), pytest suite passes (455 passed).

closes #466

ward.workflow: pull-request-and-merge

Adds the **Never debug or iterate against a live deployment** rule to the `## Agent rules` section of `AGENTS.md`, sibling to "Run until a wall worth a human", per the issue. A warded engineer runs in a sealed, ephemeral clone with no live-cluster access, so debug/tune/"fix until green" against a live deployment is a hard prohibition, the same class of wall as force-push or data loss. Deploy work matches precedent and copies the exemplar - anything genuinely needing live verification goes to the operator through an `interactive`-labeled issue. * **AGENTS.md** - the new rule, house voice (no em-dashes, no semicolons, bold anchors), cross-referencing the deploy precedent doc (`docs/deploy-patterns.md` in `coilyco-bridge/deploy`, forthcoming) and the burndown repo-exclusion filter (`coilyco-flight-deck/ward#1105`) as structural backstops. * **pyproject.toml** - `agents_md_max_chars` raised 14500 -> 16000 with the in-context rationale comment, following the three prior documented bumps: always-composed doctrine cannot move to `docs/*.md` without dropping out of load. * `CLAUDE.md` is `@AGENTS.md`, so no mirror edit is needed. Validation: full pre-commit suite passes (`ward pre-commit-all`), pytest suite passes (455 passed). closes #466 ward.workflow: pull-request-and-merge

coilyco-ops added 1 commit

2026-07-11 02:30:41 +00:00

docs: prohibit debugging or iterating against live deployments

ci / gate (pull_request) Successful in 9s

Details

d611280c25

Add the 'Never debug or iterate against a live deployment' rule to the
Agent rules section of AGENTS.md, sibling to 'Run until a wall worth a
human'. A warded engineer runs in a sealed, ephemeral clone with no
live-cluster access, so 'fix until green' against a live deployment
produces unverifiable changes that land red on main and churn. The rule
is a hard prohibition: match deploy precedent, copy the exemplar, and
hand anything needing live verification to the operator via an
interactive-labeled issue. Cross-references the deploy precedent doc
(coilyco-bridge/deploy docs/deploy-patterns.md) and the burndown
repo-exclusion filter (coilyco-flight-deck/ward#1105) as structural
backstops.

Raise the documentation-layout agents_md_max_chars cap from 14500 to
16000 with the in-context rationale, following the established bump
pattern.

closes #466

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

coilyco-ops referenced this pull request

2026-07-11 02:31:34 +00:00

AGENTS.md: prohibit warded engineers from debugging/iterating against live deployments #466

coilyco-ops commented

2026-07-11 02:35:24 +00:00

Author

Member

Closing as superseded. This PR was written before the scope correction registered - it binds "every warded engineer" but omits QA and does not exempt director / ops / advisor (who are authorized to debug deploys). #466 is being re-driven with the corrected canonical text (engineer + QA bound, director/ops/advisor exempt), and the same verbatim text goes into the infra and deploy AGENTS.md.

Closing as superseded. This PR was written before the scope correction registered - it binds "every warded engineer" but omits **QA** and does not exempt **director / ops / advisor** (who are authorized to debug deploys). #466 is being re-driven with the corrected canonical text (engineer + QA bound, director/ops/advisor exempt), and the same verbatim text goes into the infra and deploy AGENTS.md.

coilyco-ops closed this pull request

2026-07-11 02:35:24 +00:00