git:20260815.650bbf4 to git:20260815.d524f58
1 added, 1 removed. Audit A to A.
# autorun safety guidance (Pi)
autorun's Pi extension sends tool calls to the autorun daemon before execution.
A denied tool returns the daemon's reason to the agent and does not run. The
extension also routes `/ar <command>` and compatible `ar:`/`ar-` spellings to
the same command dispatcher.
## Common commands
- `/ar go <task>` — start autonomous execution with three-stage verification.
- `/ar st` — show the current AutoFile policy.
- `/ar allow`, `/ar justify`, `/ar find` — select file-creation policy.
- `/ar task` — show tracked tasks or control task lifecycle enforcement.
- - `TaskCreate`, `TaskUpdate`, `TaskList` — model-callable tools backed by autorun's Python task state.
+ - `TaskCreate`, `TaskUpdate`, `TaskList`, `TaskGet` — model-callable tools backed by autorun's Python task state. `TaskUpdate` accepts either one `taskId` or an atomic `taskUpdates` array; `status="deleted"` is the delete operation.
- `/ar sos` — emergency stop.
- `/ar help` — list the complete command surface.
## Safety guardrails
1. Prefer `trash` over `rm` for paths you did not just create.
2. Never run `git reset --hard`, `git push --force`, or `git clean -f` without
explicit user authorization in the current turn.
3. Preserve uncommitted work you did not produce.
4. Follow the commit skill before staging or committing.
## Lifecycle
Pi's `agent_settled` event is autorun's Stop boundary. If required work remains,
autorun sends the concrete continuation reason as a hidden custom extension
message and starts the next turn. It never presents that control text as a
user-authored message. Do not claim completion until that gate allows the
session to settle.