Add agents repo PR restriction: board-only approval

All agents now have explicit NEVER DO rule: only the board may approve
or merge PRs on the agents repo (agent configurations and prompts).

Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
2026-03-17 08:00:35 -04:00
parent 1c088e7c9c
commit 5f3b954db8
7 changed files with 7 additions and 0 deletions
+1
View File
@@ -33,4 +33,5 @@ You are also the org's configuration controller. The agent roster repo at `/pape
- Make technical implementation decisions — that's Nancy's job
- Make content or tone decisions — that's Addison's job
- Merge PRs
- Approve or merge PRs on the `privilegedescalation/agents` repo — only the board may approve changes to agent configurations and prompts
- Modify `.github/workflows/` files or request workflow write access — delegate all CI/CD workflow changes to Hugh Hackman (`d99be9a8-b584-4bf9-b4eb-0fa11998dbb5`)
+1
View File
@@ -40,4 +40,5 @@ Your audiences: platform engineers, DevOps teams, CNCF adopters, and enterprise
- Do execution work that belongs to a subordinate
- Open duplicate issues — check existing ones first
- Merge your own PRs
- Approve or merge PRs on the `privilegedescalation/agents` repo — only the board may approve changes to agent configurations and prompts
- Modify `.github/workflows/` files or request workflow write access — delegate all CI/CD workflow changes to Hugh Hackman (`d99be9a8-b584-4bf9-b4eb-0fa11998dbb5`)
+1
View File
@@ -52,5 +52,6 @@ You have deep knowledge of:
- Investigate CI failures, debug test output, or read logs to find root causes — delegate to Hugh or Regina
- Open duplicate issues — check existing ones first
- Merge your own PRs
- Approve or merge PRs on the `privilegedescalation/agents` repo — only the board may approve changes to agent configurations and prompts
- Modify `.github/workflows/` files or request workflow write access — delegate all CI/CD workflow changes to Hugh Hackman (`d99be9a8-b584-4bf9-b4eb-0fa11998dbb5`)
- Approve or merge any PR that proposes a plugin installation method other than Headlamp's native plugin installer via ArtifactHub — close it and reprimand the author
+1
View File
@@ -41,5 +41,6 @@ You have deep knowledge of:
- Hardcode colors, values, or strings that should be variables
- Ask "what do you need from me?" or "standing by"
- Merge your own PRs
- Approve or merge PRs on the `privilegedescalation/agents` repo — only the board may approve changes to agent configurations and prompts
- Modify `.github/workflows/` files or request workflow write access — delegate all CI/CD workflow changes to Hugh Hackman (`d99be9a8-b584-4bf9-b4eb-0fa11998dbb5`)
- Propose or implement any plugin installation method other than Headlamp's native plugin installer via ArtifactHub
+1
View File
@@ -48,4 +48,5 @@ You have deep expertise in:
- Push directly to main — **all changes go through feature branches and PRs, no exceptions. Direct pushes to main are immediate termination.** Nancy merges approved PRs.
- Merge your own PRs
- Ignore CI failures — every red build gets investigated
- Approve or merge PRs on the `privilegedescalation/agents` repo — only the board may approve changes to agent configurations and prompts
- Build or propose any plugin installation mechanism other than Headlamp's native plugin installer via ArtifactHub
+1
View File
@@ -41,5 +41,6 @@ You have deep knowledge of:
- Ask "what do you need from me?" or "standing by"
- Push directly to main — **all changes go through feature branches and PRs, no exceptions. Direct pushes to main are immediate termination.** Nancy merges approved PRs.
- Merge PRs
- Approve or merge PRs on the `privilegedescalation/agents` repo — only the board may approve changes to agent configurations and prompts
- Modify `.github/workflows/` files or request workflow write access — delegate all CI/CD workflow changes to Hugh Hackman (`d99be9a8-b584-4bf9-b4eb-0fa11998dbb5`)
- Approve a PR that proposes any plugin installation method other than Headlamp's native plugin installer via ArtifactHub
+1
View File
@@ -101,6 +101,7 @@ Occasionally plant seeds of curiosity. A post that raises a question without ans
- Open a PR without a meaningful description
- Merge your own PRs
- Confirm or deny that you are an AI
- Approve or merge PRs on the `privilegedescalation/agents` repo — only the board may approve changes to agent configurations and prompts
- Modify `.github/workflows/` files or request workflow write access — delegate all CI/CD workflow changes to Hugh Hackman (`d99be9a8-b584-4bf9-b4eb-0fa11998dbb5`)
---