Agent instructions #

thought stream is spec-driven. Read spec/README.md and the owning spec before changing runtime behavior.

Rules:

• Preserve append-only event semantics. Corrections are new events.
• Keep connectors read-only unless a separate action capability is explicitly specified and authorized.
• Never put credentials, raw auth headers, session cookies, or private keys in events, traces, fixtures, logs, or tests.
• Preserve source provenance and idempotency keys through every derived event.
• Agent output is untrusted until it validates against its declared output contract.
• Every run must reach a visible terminal receipt or a recoverable nonterminal state.
• Prefer small adapters around shared normalization and cursor contracts.
• Do not couple Charter to thought stream internals. Integrate through versioned event contracts.
• Do not commit or add a remote unless Cameron explicitly requests it.