Rules in code, not in a prompt
An AI can be talked out of an instruction. It can’t talk its way past a check that runs before the action. Sending, spending and deleting all pass one.
- Every paid tool has a spending cap, checked before each use
- Passwords and keys live in a locked file, never in messages or code
- Nothing is deleted before I’ve looked at it, and I archive where I can