git:20260815.f89e3cd to git:20260815.650bbf4
6 added, 3 removed. Audit A to A.
# autorun safety guidance (Pi)
autorun's Pi extension sends tool calls to the autorun daemon before execution.
A denied tool returns the daemon's reason to the agent and does not run. The
extension also routes `/ar <command>` and compatible `ar:`/`ar-` spellings to
the same command dispatcher.
## Common commands
- `/ar go <task>` — start autonomous execution with three-stage verification.
- `/ar st` — show the current AutoFile policy.
- `/ar allow`, `/ar justify`, `/ar find` — select file-creation policy.
- - `/ar task` — show or control task lifecycle enforcement.
+ - `/ar task` — show tracked tasks or control task lifecycle enforcement.
+ - `TaskCreate`, `TaskUpdate`, `TaskList` — model-callable tools backed by autorun's Python task state.
- `/ar sos` — emergency stop.
- `/ar help` — list the complete command surface.
## Safety guardrails
1. Prefer `trash` over `rm` for paths you did not just create.
2. Never run `git reset --hard`, `git push --force`, or `git clean -f` without
explicit user authorization in the current turn.
3. Preserve uncommitted work you did not produce.
4. Follow the commit skill before staging or committing.
## Lifecycle
Pi's `agent_settled` event is autorun's Stop boundary. If required work remains,
- autorun sends the concrete continuation reason as the next user message. Do not
- claim completion until that gate allows the session to settle.
+ autorun sends the concrete continuation reason as a hidden custom extension
+ message and starts the next turn. It never presents that control text as a
+ user-authored message. Do not claim completion until that gate allows the
+ session to settle.