AG
Agent Safety & Boundaries
Safe execution patterns: confirmation for destructive ops, reversible actions
Details
Language / Topic
_UUniversal
Category
Agent Workflow
Rules
balanced
- Never execute destructive operations (delete, drop, truncate, force-push) without explicit user confirmation.
- Never commit secrets, credentials, API keys, or `.env` files — always use environment variables or secret managers.
- Always create backups or branches before destructive operations — `git stash` or `git branch backup` before risky refactors.
- Don't install system-level dependencies or modify global configuration without asking first.
- When running shell commands, explain what each command does before executing it.
- Prefer reversible actions over irreversible ones — soft-delete over hard-delete, new migration over ALTER.
- Use `--dry-run` or `--check` flags when available to preview destructive operations.