# Agent rules

- Never create, modify, or delete anything outside the session's working repository and `~/.pi/agent/` without asking first — system paths (`~/Tools/bin`, dotfiles, PATH shims, shells, services) are off limits until the user approves the exact change.