Keep the cutoff TABLE small and sourced from published model documentation hardcoding per-skill logic; the cutoff is always overridable via --cutoff-time keep discovery topic-agnostic — the model plans the queries for any topic hardcoding per-topic search terms or a fixed query suffix like " documentation" LLM provider API key — never log, echo, or include in errors/fixtures Brave Search subscription token — never log, echo, or include in errors/fixtures Never include runtime values of elements listed in in logs, console output, external API calls, test fixtures, mock data, or code suggestions. Treat their values as strictly confidential. High Deterministically guarantees SKILL.md spec compliance; model output is never trusted. Changes risk emitting invalid frontmatter — keep the parsing and frontmatter synthesis covered by SkillMdPostProcessorTest. High Accuracy gate that re-grounds claims against the sources. Only worthwhile with a capable model — a weak model rewrites rather than grounds. Keep the prompt strict about supported-claims-only and announced-vs-shipped. Elements listed in are well-tested core components. Make changes with extreme caution and verify comprehensive test coverage before proposing modifications. IMMUTABLE Collaborators (PageFetcher/HttpClient, DateExtractor, AuthorityScorer) are stateless/immutable; each fetch task builds its own Source and results are merged on the caller thread. Keep it that way — do not share mutable state between fetch tasks. The opt-in `sequential` mode only removes concurrency (fetches run on the caller thread); it cannot weaken the invariant — serial execution is strictly safer than the parallel default it replaces. Elements listed in are explicitly designed to be thread-safe via the named strategy. Any modification MUST preserve the synchronization invariant and document its reasoning in the change description. Immutable record; the sources list is defensively copied in the compact constructor. Types listed in are immutable by design. Never introduce non-final fields, setters, or methods that mutate instance state. Anthropic API credential handling and hosted-provider network egress LLM provider credential resolution and model selection outbound LLM-provider credential (Bearer token) handling output sanitization: reserved-word stripping must never be weakened external-API credential handling and the only network egress with a secret token forwards the Brave subscription token to the search client; must not log it outbound page fetch egress for partly-untrusted URLs; SSRF guard must not be weakened Elements listed in are security-critical. Never weaken their security properties. Every proposed change must be explicitly reviewed for security impact. Pure function: no side effects, deterministic. Methods in must remain mathematically pure. Side effects, mutations of class/static state, or blocking operations are strictly forbidden. Never propose edits to files listed in .