---
description: Hard limits that hooks enforce in Claude Code and Codex; Cursor must follow them by hand
alwaysApply: true
---

- No force-push to `main`/`master`, no `git reset --hard` on others' work, no `--no-verify`.
- Never read or print `.env` / `.env.*` (except `.env.example`), keys or tokens.
- Never delete outside the project folder. Never drop, truncate or bulk-delete a database the human has not called disposable.
- If a command is refused, report the reason to the human. Do not rephrase the command to get it through.