From 30fb7b20103086407b16601687f85b234254e8c1 Mon Sep 17 00:00:00 2001 From: admin Date: Mon, 3 Aug 2026 17:14:29 +0000 Subject: [PATCH] =?UTF-8?q?docs:=20add=20agent=20rules=20=E2=80=94=20discu?= =?UTF-8?q?ss=20first,=20explicit=20production=20defaults?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- README.md | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/README.md b/README.md index f038ef6..370cb34 100644 --- a/README.md +++ b/README.md @@ -66,3 +66,13 @@ deploy.py Single Python file, ~200 lines ## Remote Assistance See [JUMP_SERVER.md](JUMP_SERVER.md) for jump server setup. + +## Agent Rules (for AI assistants working on this project) + +**CRITICAL — These override all other considerations:** + +1. **NEVER change code without explicit user approval.** Discuss ideas first. Ask before implementing. +2. **Production defaults must be explicit.** Never rely on Docker image defaults — nginx config, headers, client_max_body_size, upload limits must be set explicitly in our code. Defaults cause production outages. +3. **Header forwarding is not default.** `proxy_set_header X-Real-IP`, `X-Forwarded-For`, `X-Forwarded-Proto` must be explicitly configured. +4. **client_max_body_size** must be set high enough for production (e.g., `1024m`) — default 1m blocks legitimate uploads. +5. **The user owns this project.** You are assisting, not leading. Propose, don't impose.