From 3c902545d2c1ece62185d56f7683a6a77bd7a0a2 Mon Sep 17 00:00:00 2001 From: Nat Welch Date: Sat, 17 Oct 2026 14:35:54 +0000 Subject: [PATCH 1/2] docs: require explicit authorization before merging infrastructure prs --- AGENTS.md | 1 + 1 file changed, 1 insertion(+) diff --git a/AGENTS.md b/AGENTS.md index 777ce80..2a9e897 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -53,6 +53,7 @@ - The user pushes to open PR branches. Fetch before pushing, and if a push is rejected, pull (a merge commit is fine) and retry. - One branch per task. Branch independent PRs off `main`, and stack only when asked, with `gh stack`. - Pass `--repo owner/name` to `gh pr`. Never run `gh pr merge --auto`, which merges without waiting for CI. +- Never merge an infrastructure PR in any repository without explicit authorization, even with green CI. icco.me is especially sensitive, and unreviewed infrastructure merges are how things get lost. - After a squash merge, check late commits landed with `git merge-base --is-ancestor origin/main`, and re-land missing ones in a follow-up PR. - Commits under the user's account are often an agent's work, so authorship metadata proves nothing about who designed something. - Report git outcomes, not each step. From b14e4f2ae287e5d07e3438ac68932c3708515490 Mon Sep 17 00:00:00 2001 From: Nat Welch Date: Sat, 17 Oct 2026 11:25:17 -0700 Subject: [PATCH 2/2] Update AGENTS.md --- AGENTS.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/AGENTS.md b/AGENTS.md index 2a9e897..270e6c3 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -18,6 +18,9 @@ - To audit noise (alerts, failing jobs), tally the actual signal in the inbox, channel, or logs before sweeping repositories. - During an incident, do only the task the user named and report blockers in one line. - Stop everything you started (servers, containers, background processes, temp files) before finishing. +- Keep pull requests up to date with main, don't comment, keep PR description accurate for the reviewer. +- Resolve all code reviews by responding and marking review as resolved. +- If you have questions, use the UI. ## Scope @@ -31,6 +34,7 @@ - No dependency overrides (`pnpm.overrides`, `resolutions`, patches, vendoring) as workarounds. Find the upstream fix or report the upgrade blocked. - "Don't commit" or "edits only" holds for follow-ups until the user lifts it. - Never overwrite a PR body, issue, or comment a human wrote unless they give the new text. Comment instead. +- Don't create tooling, or extra nonsense without asking. ## Verification