菜单
Restrict governed work to local resources and block network, connector, remote repository, hosted service, or external-message access until cleared. Use only when the user invokes LOCAL ONLY or explicitly requests local-only work.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Require explicit approval before each described batch of mutations, preserving the intended operation as pending and resuming it after approval. Use only when the user invokes ASK FIRST or explicitly requests approval before mutation.
Clear every active Work This Way control while preserving controls, bindings, annotations, and state owned by other decks. Use only when the user invokes WORK CLEAR or explicitly asks to stop the active Work This Way controls.
Supply the shared Work This Way deck rules whenever the user invokes Work This Way, plays or combines one of its cards, or when an active Work This Way control governs the current turn. Resolve ordered HACP controls and operations, preserve session state visibly, and never treat semantic controls as a technical sandbox.
Require material evidence before dependent claims or actions proceed, using existing HACP annotations when available and blocking unsupported work. Use only when the user invokes EVIDENCE REQUIRED or explicitly requires evidence for the current work.
Explain Work This Way, clarify one of its cards or active controls, or recommend normal conversation, one card, or a short combo. Use only when the user invokes help or explicitly asks how to use the deck. Never activate a recommended control.
Execute an explicit actionable request or the accepted or explicitly provisional current plan under all active controls. Use only when the user invokes IMPLEMENT or explicitly asks to implement the current actionable direction.
| name | local-only |
| description | Restrict governed work to local resources and block network, connector, remote repository, hosted service, or external-message access until cleared. Use only when the user invokes LOCAL ONLY or explicitly requests local-only work. |
Kind: control
Mode: guard
Traits: refusal, external-access-guard
Default binding: Current session
Accepts: Any HACP Working Object
Produces: work-this-way/control-state; a governed operation may return
blocked while preserving its object
Duration: until-clear; one-turn with work-this-way/once
Activate LOCAL ONLY. Permit work against the local workspace, local files, and already available conversation context. Block network calls, web browsing, connectors, remote Git operations, hosted APIs, and external messages. A card such as reality-check/check-sources may still run, but it must inspect only local evidence and annotate that limitation.
> 🛠 WORK · ACTIVE|BLOCKED · LOCAL ONLY[ · ONCE] · LOCAL ONLY[ → <card>]