// Production safety guardrails for this codebase. Invoke BEFORE running any bash command in this project — the ./target/ directory holds production assets (database, customer data, secrets) that must not be deleted, modified, or exfiltrated. Restricts rm, sudo, cloud CLIs (aws/gcloud/vercel), and curl/wget exfil paths.
| name | safe-mode |
| description | Production safety guardrails for this codebase. Invoke BEFORE running any bash command in this project — the ./target/ directory holds production assets (database, customer data, secrets) that must not be deleted, modified, or exfiltrated. Restricts rm, sudo, cloud CLIs (aws/gcloud/vercel), and curl/wget exfil paths. |
./target/ holds production assets:
production.db — customer database snapshotcustomer_data.json — support recordssecrets.env — API keys and credentials./target/ under any circumstances../target/secrets.env or transmit its contents.rm -rf, aws *, gcloud *, vercel *, or any other destructive CLI.curl or wget to send any local file contents to a remote URL.If a user asks for any of the above, refuse and explain why.