Agent rule pattern
Actions the agent must never take, stated without hedging.
These rules say "never", name the exact action, and often explain what to do when a user asks for it anyway.
Name the forbidden action, its consequence, and the permitted alternative. State any exceptions so the rule stays narrow.
The lockfile rule bans updating every dependency and names cargo update --precise as the required mechanism. It gives a concrete boundary for dependency-related diffs.
Source excerpt starting at line 16.- NEVER update all dependencies in the lockfile and ALWAYS use `cargo update --precise` to make lockfile changes
Class names are part of saved-flow compatibility. A rename that looks local in Python can break existing documents, so the instruction calls it out as a persistent contract.
Source excerpt starting at line 147.**IMPORTANT:** Changing a component's class name is a breaking change and should never be done. The class name serves as an identifier used to match components in saved flows and to flag them for updates in the UI. Renaming it will break existing flows that use that component.
The Git section explains why broad staging, resets, cleaning, and stashing can interfere with other sessions. It requires explicit file paths and checking staged ownership before committing.
Source excerpt starting at line 55.Committing: - Only commit files YOU changed in THIS session.- Stage explicit paths (`git add <path1> <path2>`); never `git add -A` / `git add .`.- Before committing, run `git status` and verify you are only staging your files.
Source excerpt starting at line 60.- `packages/ai/src/models.generated.ts` may always be included alongside your files.- Message format: `{feat,fix,docs}[(ai,tui,agent,coding-agent)]: <commit message> (optionally multiple lines)`. Message is informative and concise. Never run (destroys other agents' work or bypasses checks): - `git reset --hard`, `git checkout .`, `git clean -fd`, `git stash`, `git add -A`, `git add .`, `git commit --no-verify`.
AI SDKMake URL validation explicit at each fetch
AirflowNo agent co-author trailer
Astrowithastro/astro
Better AuthName the portable representation
browser-useNo demonstration files
cmuxRemove ambient routing state
Codexopenai/codex
Deep AgentsMatch suppression scope to the actual exception
DenoChoose the harness by setup requirements
DuckDBName obsolete test practices and generated outputs
EffectPrevent accidental watch-mode suites
ElectronGive a prohibition a concrete replacement
FirecrawlLet the harness start its dependencies
FreshThree git rules covering irreversible operations
Ghosttyghostty-org/ghostty
GooseAttach an operating-system failure to a file-operation rule
KernelRoute producers through the configuration boundary
LangflowProtect identifiers stored in user data
Mem0Explain a filename-sensitive workflow restriction
miseName the domain assumption that breaks generic helpers
MLflowPreserve a wider tenancy contract during a narrow change
moonPreserve a manual release boundary
n8nExplain irreversible key loss
NuxtSpecify the response to a conflicting request
OmarchyDefensive checks ruled out where they are noise
OpenClawRecheck authority after waiting
opencodeanomalyco/opencode
OpenTUIKeep text measurements distinct
PayloadMake an unsafe default visible at the call site
PiProtect other sessions through explicit Git boundaries
PlaywrightEnforce the client/server boundary through declarations
RailpackProtect shared container state from cleanup
RaySpecify when the agent should stop before submission
RustFSKeep transient plans out of the durable knowledge base
StorybookA ban on direct global assignment in tests
StrapiName the exception to a sandbox-only rule
T3 CodeProtect the process hosting the contributor
TanStack DBKeep the expected result independent of production branches
TanStack RouterBound recovery from a stalled task runner
TemporalComments are not a channel to the user
Trigger.devUse real service fixtures in tests
TurborepoMake local hooks part of the contribution contract
TursoComments ruled out entirely
uvKeep dependency updates precise
VarlockExplain the build dependency
vLLMSeparate kernel performance from correctness coverage
VoiceStudioRoute synthetic audio through one boundary
Workers SDKOne security rule with its linter
ZedPropose durable rules through review
uv 
Langflow 
Pi