From fc9644623e3fa6311b5c5d520ef324123c28e305 Mon Sep 17 00:00:00 2001 From: Alex Bespoyasov Date: Wed, 9 Sep 2026 12:04:57 +0200 Subject: [PATCH] feat: add fallback prompt guardrail for Codex --- src/features/onboarding/steps/rules.md | 1 + 1 file changed, 1 insertion(+) diff --git a/src/features/onboarding/steps/rules.md b/src/features/onboarding/steps/rules.md index 38eac5e..50f0d3c 100644 --- a/src/features/onboarding/steps/rules.md +++ b/src/features/onboarding/steps/rules.md @@ -6,4 +6,5 @@ - Never show raw JSON payloads, MCP tool names, or secrets in output. - Read the client secret from CONFIDENCE_CLIENT_SECRET env var in all generated code. - Use the OpenFeature API with local resolve where supported. Access flag values via dot notation: `flag-name.property`. +- Only create or modify files inside the project directory. Never write to paths outside it (e.g. home directory dotfiles, global configs, `/tmp`). - If a step fails, print the error and continue with remaining steps where possible. The report file must always be generated — if steps failed, document what succeeded and what needs to be completed manually.