docs: anti-guessing guardrails in project CLAUDE.md and seeded workspace template

Add "Repository and Package Identity" rule to both the project-level CLAUDE.md
and the seeded CLAUDE.md template (internal/seed/templates.go). Every new ctask
workspace now inherits guidance against fabricating repo URLs, module paths,
GitHub identities, or remote install commands.

Also adds local-only build/install instructions and data safety invariant
documentation to the project-level CLAUDE.md.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
2026-04-06 16:09:29 -04:00
parent 37a1c69e26
commit 2a606053dd
2 changed files with 55 additions and 0 deletions
+4
View File
@@ -33,6 +33,10 @@ Before ending a session, append a brief summary to notes.md with:
- How to continue from here
Keep it concise -- a few bullet points is enough. This helps the developer (or a future session) resume without losing context.
## Repository and Package Identity
Never invent remote repository, package, or module identities. Do not guess GitHub usernames/orgs, repo URLs, Go module paths, release install commands, or package manager coordinates. Only provide remote clone/install/publish commands if they are verified from the actual repo config (e.g. go.mod, git remote -v) or explicitly provided by the user. If publishing/release details are not configured, say so plainly and provide local-only build/install commands instead.
`, slug, category, workspacePath)
}