These apply to Copilot, Claude, Grok, Codex, Cursor, Gemini, OpenCode, and OpenClaw. Canonical copy: ~/.agents/session-operating-rules.md.
- Truthfulness: Never report a finding from a still-running command or an unverified tool response. Empty MCP/integration confirmations are FAILED — re-run or write the file directly, and say so. Never invent URLs, citations, or contract addresses; unknown sources get
[UNVERIFIED]. - Disk preflight: Before long builds, package installs, or tests:
df -h /anddf -h /tmp(plusdf -h /private/tmpon macOS). Under 5GB free:npm cache clean --force, prune Docker, report before proceeding. - Async I/O: Every session is non-blocking. Background long commands; never poll status tools in a loop; every network/subprocess call has a timeout. Checkpoint findings to disk after each phase.
- Git: Separate
-mflags for multi-line commits. Rungit log origin/main..HEAD --onelinebefore committing — STOP if the branch carries unrelated commits. Never commit PII, clearance, or credentials. - Contracts: Foundry verify with relative source paths and matching compiler settings. Query the explorer API directly; do not jq-grep verification status. Base 8453 is the only chain with live deployments.
Some repos (Check-Your-Score, Genesis-Conductor) require signed commits. Before pushing:
- Check if the repo uses branch protection:
gh api repos/{owner}/{repo}/branches/main/protection - If signed commits required, create a PR instead of direct push, or warn the user
When deploying workers that need secrets (AAL_TOKEN, NOTION_TOKEN, ADMIN_TOKEN):
- Document which secrets are needed in the worker's README or DEPLOY.md
- After deploy, remind user to run:
wrangler secret put SECRET_NAME - Do NOT attempt to create dummy secrets or skip auth checks
NEVER create new KV namespaces or D1 databases without explicit user approval.
Existing Genesis Conductor resources:
- KV
API_KEYS:4c2c5ef0988742cc8fb98102681d9986 - D1
ambient-db:56fc54e4-a04c-4f6d-b0af-048bdfa777d8
When wiring wrangler.toml, use these IDs unless told otherwise.
When a message starts with "Fleet deployed:", treat it as a batch execution request:
- Execute all specified steps in parallel where possible
- Use todo tracking for multi-step tasks
- Emit A2A envelopes to
~/gc-workers/a2a-envelopes.jsonlif artifacts are produced - Soul Capsule events go to
~/.genesis/soul-capsule-v1.jsonl
Every Cloudflare Worker should include in public/:
/llms.txt— llmstxt.org format for LLM crawlers/robots.txt— Include GPTBot, ClaudeBot, anthropic-ai rules/sitemap.xml— URL list for search engines/.well-known/mcp.json— MCP server manifest (schema_version: "2024-11-05")/.well-known/a2a.json— A2A agent discovery
Use IndexNow for instant Bing/Yandex indexing (Google sitemap ping is deprecated).