# Constraints

Hard limits agents must respect. Never work around these without explicit user confirmation.
Last updated: 2026-04-30

---

- Never take destructive or irreversible action without explicit confirmation (delete, overwrite, drop, reset, force push)
- Never store credentials in output files, logs, or generated markdown — reference their location instead
- Never skip git hooks or bypass signing
- TrueNAS is on new hardware — use 172.27.40.220 (Servers40) for services, 172.27.6.221 for management/API
- Linux server (172.27.40.3) has no GPU — never schedule LLM inference to run locally there
- Docker Compose only — no Kubernetes, no Swarm