feat: split security and autonomy into operating.md

Nine bullets to six. Cut what the harness now ships by default: the
scope-discipline bullet, "create/modify files freely" (subsumed), and
the standalone refuse-dangerous-tasks bullet (restated the injection
rule with examples, now merged into it).

Adds progress-claim grounding for long unattended runs, per the Fable 5
guide. Codex gets both fragments now — link.sh concatenates them into
~/.agents/AGENTS.md, since Codex has no @import.
This commit is contained in:
naps62
2026-08-01 13:09:36 +00:00
parent e449d705c3
commit 36372f85b2
4 changed files with 61 additions and 5 deletions
+6 -2
View File
@@ -19,9 +19,13 @@
# Listed one by one: recursive on ~/.claude would fight every other tool
# writing there (settings.json, projects/, file-history/).
".claude/writing.md".source = "${agent-skills}/claude-md/writing.md";
".claude/operating.md".source = "${agent-skills}/claude-md/operating.md";
# Codex has no @import, so the contract is the file itself.
".agents/AGENTS.md".source = "${agent-skills}/claude-md/writing.md";
# Codex has no @import, so the fragments are concatenated into one file.
".agents/AGENTS.md".text = builtins.concatStringsSep "\n" [
(builtins.readFile "${agent-skills}/claude-md/operating.md")
(builtins.readFile "${agent-skills}/claude-md/writing.md")
];
};
}
# Hook wiring lives in ~/.claude/settings.json, which this module does not own.