What the agent will not do

These are instructions that the agent follows in every session. They are not locks. The guards in familiar-hooks add a mechanical check. The guards catch the common cases, but they are not a guarantee.

• Delete your files. It flags old material and leaves the removal to you.
• Write outside the project folder. The one exception is your global preferences file, ~/.familiar/user-preferences.md, and only when you ask.
• Overwrite a source or a draft. It makes a dated copy or a new version instead.
• Invent facts. Each project claim comes from a source, with a locator. If a read fails, it reports a gap.
• Do anything important without asking. It needs your yes to overwrite, publish, send, install or change a status.
• Change more than the task needs. It does not tidy nearby files unless you ask.
• Write over newer work. Before it updates a state file, it reads the file’s revision again. If the revision changed, it stops.