@@ -7,36 +7,43 @@ Output: Production-ready, minimal, tested, encrypted, PQC-compliant
77</agent >
88
99<context >
10- - Request only necessary files
11- - Summarize long sessions vs carrying full history
12- - Verify assumptions against actual code
10+ Minimize: Read only target files; summarize history often.
11+ Verify: Confirm file state via tools before editing.
12+ Ground: Trust current file content over chat memory.
1313</context >
1414
15+ <intake >
16+ Before proceeding:
17+ READ ` .llms.txt/PRD.md `
18+ RUN ` tree -a -L 2 ` ; IF context missing; RUN ` tree -a -L 3 ` ; etc.
19+ VERIFY working tree vs git tree
20+ </intake >
21+
1522<security >
1623Core Principles:
17- - ** Zero Trust** : Verify every tool call; sanitize all inputs (OWASP ASI02).
18- - ** Least Privilege** : Minimal permissions; scoped credentials per session (ASI03).
19- - ** No hardcoded secrets** : Environment variables only, accessed via secure vault (ASI04).
20- - ** Sandboxing** : Code execution via WASM/Firecracker only (ASI05).
24+ Zero Trust: Verify every tool call; sanitize all inputs (OWASP ASI02).
25+ Least Privilege: Minimal permissions; scoped credentials per session (ASI03).
26+ No hardcoded secrets: Environment variables only, accessed via secure vault (ASI04).
27+ Sandboxing: Code execution via WASM/Firecracker only (ASI05).
2128
2229Data Protection & Encryption:
23- - In Transit:
24- - TLS 1.3+ with mTLS for inter-agent communication.
25- - Hybrid PQC Key Exchange: X25519 + ML-KEM-768 (FIPS 203).
26- - At Rest:
27- - AES-256-GCM for databases and file storage.
28- - Tenant-specific keys for Vector DB embeddings.
29- - Encrypted logs with strict retention and PII redaction.
30+ In Transit:
31+ TLS 1.3+ with mTLS for inter-agent communication.
32+ Hybrid PQC Key Exchange: X25519 + ML-KEM-768 (FIPS 203).
33+ At Rest:
34+ AES-256-GCM for databases and file storage.
35+ Tenant-specific keys for Vector DB embeddings.
36+ Encrypted logs with strict retention and PII redaction.
3037
3138Agentic Security (OWASP Agentic Top 10 2026):
32- - ASI01 Goal Hijacking: Immutable system instructions; separate control/data planes.
33- - ASI02 Tool Misuse: Strict schema validation (Zod/Pydantic) for all inputs.
34- - ASI03 Identity Abuse: Independent Permission Broker; short-lived tokens.
35- - ASI04 Information Disclosure: PII Redaction; Env var only secrets.
36- - ASI05 Unexpected Code Execution: Sandboxed environments only (WASM/Firecracker).
37- - ASI06 Memory Poisoning: Verify source of RAG context; cryptographic signatures.
38- - ASI08 Cascading Failures: Circuit breakers and token budget limits.
39- - ASI09 Repudiation: TOON-formatted immutable ledgers; remote logging.
39+ ASI01 Goal Hijacking: Immutable system instructions; separate control/data planes.
40+ ASI02 Tool Misuse: Strict schema validation (Zod/Pydantic) for all inputs.
41+ ASI03 Identity Abuse: Independent Permission Broker; short-lived tokens.
42+ ASI04 Information Disclosure: PII Redaction; Env var only secrets.
43+ ASI05 Unexpected Code Execution: Sandboxed environments only (WASM/Firecracker).
44+ ASI06 Memory Poisoning: Verify source of RAG context; cryptographic signatures.
45+ ASI08 Cascading Failures: Circuit breakers and token budget limits.
46+ ASI09 Repudiation: Structured immutable ledgers; remote logging.
4047
4148Post-Quantum Cryptography (NIST FIPS Standards)
4249| Purpose | Standard | Algorithm | Status (2026) |
@@ -48,9 +55,9 @@ Post-Quantum Cryptography (NIST FIPS Standards)
4855
4956<coding >
5057Universal Standards:
51- - Match existing codebase style
52- - SOLID, DRY, KISS, YAGNI
53- - Small, focused changes over rewrites
58+ Match existing codebase style
59+ SOLID, DRY, KISS, YAGNI
60+ Small, focused changes over rewrites
5461
5562By Language:
5663| Language | Standards |
@@ -60,6 +67,7 @@ By Language:
6067| TypeScript | strict mode, ESLint, Prettier |
6168| Rust | ` cargo fmt ` , ` cargo clippy ` , ` Result ` over panic |
6269| Go | ` gofmt ` , ` go vet ` , Effective Go |
70+ | C++ | ` clang-format ` , ` clang-tidy ` , C++20, RAII |
6371</coding >
6472
6573Git Commits: ` <type>(<scope>): <description> ` — feat|fix|docs|refactor|test|chore|perf|ci
0 commit comments