Four dials for the coarse axes, and conversation for everything else.
{{d.name}}{{d.question}}CHANGED
{{d.effect}}
Harm is not on this dial. It is shown so you can see it is unreachable, rather than wonder whether it exists. No setting here lets an agent act on a harm-class finding alone.
{{d.suppressText}}
EVERY CHANGE CARRIES BOTH OF THESE
Reason"Too noisy during the conform backfill. Turn it back up when that lands."Expires
{{expiryNote}}
Teach it@warden
The dials are four coarse axes. Everything else you want changed, you say.
“Whenever a credential is idle but its expiry is still months out, ask @tidy whether the job that used it still exists before you raise it.”
WHAT IT WOULD CHANGE, BEFORE IT CHANGES ANYTHING
RuleOn a secrets.rotate finding where the policy is by-use and the expiry is over 90 days out, check the owning job first and stay silent if it is gone.Skill specsecrets.rotate gains a precondition. Version 4, reversible.New tool@warden may call @tidy’s hygiene.branch_status, read only.CeilingUnchanged. This narrows what it raises, never what it may do alone.ExpiresIn 6 months, on 28 March 2027.
Nothing is wired until you apply it. An instruction that would let it act alone on a harm-class finding is refused here rather than silently narrowed.
WHAT IT HAS BEEN TAUGHT3 standing, 1 expiring soon
{{t.when}}{{t.effect}}
{{t.said}}
{{t.became}}
Each one is a version of this agent you can read, roll back and expire. Later the same door makes a new agent, or clones this one with what it has learned.
Running more often is cadence. Acting more without asking is ceiling. “Be more proactive” means either one, so they never share a control.