git:20260620.6524d98 to git:20260918.338227d

4 added, 2 removed. Audit A to A.

# Repository Working Agreements

## Scope

- This repository packages a safe Codex setup starter. Keep edits focused on

- installable templates, docs, validation, and security guardrails.

+ This repository packages AgentChef, a safe setup kit for OpenAI Codex CLI and

+ Anthropic Claude Code. Keep edits focused on installable templates, docs,

+ validation, and security guardrails. `CLAUDE.md` mirrors this file for Claude

+ Code sessions; keep both aligned.

For the installable global Codex operating contract, review

`templates/codex/AGENTS.md` and `catalog/routing-profiles.json`. This root

file governs maintenance of this repository only.

## Security

- Never commit secrets, auth files, memory files, sessions, local caches, or

machine-specific private paths.

- Keep authenticated MCP connectors disabled by default.

- Do not add approval rules that auto-allow destructive commands, credential

access, publishing, deployments, releases, or broad shell execution.

- Do not delete, prune, uninstall, drop, truncate, overwrite, or clean files,

directories, dependencies, artifacts, local state, or configuration without

explicit user approval. Non-destructive edits and validation may continue.

- Install scripts must back up overwritten files and must not delete user data.

- Run `npm run validate` before reporting the repo as push-ready.

## Documentation

- Keep `README.md` and `README.tr.md` aligned.

- Cite official Codex documentation for current behavior.

- Prefer concise, copy-pasteable commands.

- When install behavior changes, update `docs/install.md`,

`docs/install.tr.md`, and `docs/security-model.md`.

## Verification

Use the narrowest meaningful check first:

```bash

npm run validate

```

Before commit or push:

```bash

git status --short

git diff --cached

```

Use Gitleaks when available:

```bash

gitleaks detect --redact --no-banner --no-git --verbose

```