Read AGENTS.md first — it is the full contract for working in this repository. The rule below is repeated here because it is non-negotiable.
This repository is public. Issues, pull requests, commits, comments, and their edit histories are visible to everyone.
- Never post internal details. No private-repo paths or links (website, frontend, gateway, zigrepper), no asset or deploy names, no infrastructure or performance numbers, no session/run ids, no trace or transcript excerpts, no local paths (
~/…), no quoted user messages, no provider/model/account details. Nothing from.graff/traces, sessions, or tool results. - An issue is the bare minimum: a generic symptom, the harness's own error text, the root cause in code terms, and the fix. Evidence stays in the conversation, not the tracker. Same for PR bodies and commit messages.
- No assistant or model-vendor attribution anywhere — not in issues, PRs, commit messages, or trailers (no
Co-Authored-By, no session links). Commits carry only the repository owner's git identity. - If something sensitive was already posted, delete it (
gh api graphqldeleteIssuewith the issue's node id fromgh issue view N --json id); editing is not enough because edit history stays visible. Then tell the user what was exposed and for how long.