Policies

Policies describe enforcement intent once, then adapters translate it into client-specific configuration.

Canonical source:

source/policies/**

Generated Codex output:

dist/codex/.codex/rules/default.rules

Generated Claude output:

dist/claude/.claude/settings.json

Current Baseline

• git push requires approval.
• rm -rf is forbidden.
• .env* and secrets/** are protected in Claude generated settings.

Maintenance Rule

Use policies only for enforcement. Use skills for workflows and guidance for context.