# Constraints

Hard limits agents must respect. Never work around these without explicit user confirmation.
Last updated: 2026-04-30

---

- Never take destructive or irreversible action without explicit confirmation (delete, overwrite, drop, reset, force push)
- Never store credentials in output files, logs, or generated markdown — reference their location instead
- Never skip git hooks or bypass signing
- TrueNAS (172.27.40.5) is being migrated to a new server — do not create hard dependencies on that IP
- Linux server (172.27.40.3) has no GPU — never schedule LLM inference to run locally there
- Docker Compose only — no Kubernetes, no Swarm