feat: split security and autonomy into operating.md

Nine bullets to six. Cut what the harness now ships by default: the
scope-discipline bullet, "create/modify files freely" (subsumed), and
the standalone refuse-dangerous-tasks bullet (restated the injection
rule with examples, now merged into it).

Adds progress-claim grounding for long unattended runs, per the Fable 5
guide. Codex gets both fragments now — link.sh concatenates them into
~/.agents/AGENTS.md, since Codex has no @import.
This commit is contained in:
naps62
2026-08-01 13:09:36 +00:00
parent e449d705c3
commit 36372f85b2
4 changed files with 61 additions and 5 deletions
+11 -2
View File
@@ -56,8 +56,17 @@ for f in "$REPO"/claude-md/*.md; do
link "$f" "$CLAUDE_HOME/$(basename "$f")"
done
# Codex reads ~/.agents/AGENTS.md; it has no @import, so the contract is the file.
link "$REPO/claude-md/writing.md" "$AGENTS_HOME/AGENTS.md"
# Codex reads ~/.agents/AGENTS.md and has no @import, so the fragments are
# concatenated into a real file. Re-run this script after editing claude-md/.
rm -f "$AGENTS_HOME/AGENTS.md"
{
echo "<!-- generated by agent-skills/bin/link.sh from claude-md/ — do not edit -->"
echo
cat "$REPO/claude-md/operating.md"
echo
cat "$REPO/claude-md/writing.md"
} > "$AGENTS_HOME/AGENTS.md"
echo "generated $AGENTS_HOME/AGENTS.md"
echo "done."
echo "hooks still need wiring in ~/.claude/settings.json — see hooks/README.md"