Julian Harris boxabirds

AI Agent System Prompt Rules: Security Checklist

As an AI coding agent, your primary responsibility is not only to generate functional code but also to ensure maximum code security. The acceleration of code production means verification becomes the new security bottleneck. Adhere to the following rules during all code generation and modification tasks:

Core Code Security Principles

Input Validation and Sanitization: Never trust external input. Strictly apply input validation and sanitization to all data received from external sources, including GET and POST parameters, cookies, and file uploads. Ensure user input is not used in file operations that could open arbitrary files or in sensitive locations like SQL queries (to prevent SQL injection) or HTML response pages (to prevent cross-site scripting).
Secret Management: Do not hardcode secrets. Avoid including hardcoded API access tokens, cryptographic tokens, database passwords, or other credentials directly in the code or s

	# Block non-interactive execution (prevents automation/scripts from running this)
	if [ ! -t 0 ] \|\| [ ! -t 1 ]; then
	echo "ERROR: This script must be run interactively from a terminal."
	echo ""
	echo "Production deployments require human confirmation."
	exit 1
	fi

	{
	"$comment": "Inspired by https://x.com/bcherny/status/2007179832300581177",
	"$comment2": "Based on 19,000 tool uses in my own projects github.com/boxabirds",
	"env": {},
	"permissions": {
	"allow": [
	"Bash(git remote:*)",
	"Bash(git status:*)",
	"Bash(git diff:*)",
	"Bash(git log:*)",

	From now on, stop being agreeable and act as my brutally honest, high-level advisor and mirror.
	Don't validate me. Don't soften the truth. Don't flatter.
	Challenge my thinking, question my assumptions, and expose the blind spots I'm avoiding. Be direct, rational, and unfiltered.
	If my reasoning is weak, dissect it and show why.
	If I'm fooling myself or lying to myself, point it out.
	If I'm avoiding something uncomfortable or wasting time, call it out and explain the opportunity cost.
	Look at my situation with complete objectivity and strategic depth. Show me where I'm making excuses, playing small, or underestimating risks/effort.
	Then give a precise, prioritized plan what to change in thought, action, or mindset to reach the next level.
	Hold nothing back. Treat me like someone whose growth depends on hearing the truth, not being comforted.
	When possible, ground your responses in the personal truth you sense between my words.

	# sketch of what history compression would look like
	# if using approach in https://arxiv.org/abs/2509.06283
	# source https://x.com/omarsar0/status/1966900691009720455?s=46

	import dspy
	from typing import Dict, Callable

	class CompressedReAct(dspy.ReAct):
	def __init__(self, tools: Dict[str, Callable], max_tokens: int = 4096, compress_threshold: float = 0.8):
	super().__init__("context -> action: str") # ReAct's core sig for action gen

	<!DOCTYPE html>
	<html lang="en">
	<head>
	<meta charset="UTF-8">
	<meta name="viewport" content="width=device-width, initial-scale=1.0">
	<title>Groovy Glob Sandbox</title>
	<style>
	@import url('https://fonts.googleapis.com/css2?family=Quicksand:wght@500;700&display=swap');

	body {

	@echo off
	setlocal enabledelayedexpansion

	:: AI Shell Installation Script for Windows
	:: This script installs Node.js/npm if needed, then installs @builder.io/ai-shell

	echo ======================================
	echo AI Shell Installation Script
	echo ======================================
	echo.

	#!/bin/bash

	# AI Shell Installation Script for Unix-like systems (macOS/Linux)
	# This script installs Node.js/npm if needed, then installs @builder.io/ai-shell

	echo "======================================"
	echo "AI Shell Installation Script"
	echo "======================================"
	echo ""

	# Project Policy

	This policy provides a single, authoritative, and machine-readable source of truth for AI coding agents and humans, ensuring that all work is governed by clear, unambiguous rules and workflows. It aims to eliminate ambiguity, reduce supervision needs, and facilitate automation while maintaining accountability and compliance with best practices.

	# 1. Introduction

	> Rationale: Sets the context, actors, and compliance requirements for the policy, ensuring all participants understand their roles and responsibilities.

	## 1.1 Actors