Instruction file imported from circeco/circulareconomy2.0 (
.cursor/rules/git-and-deploy-safety.mdc). Copyright stays with the author.
Git, push, and production safety
Default: implement locally and stop. Do not commit, push, deploy, or write production data unless Piero explicitly asks.
Permission map
| Piero says | Agent may do |
|---|---|
| "implement", "ok lets do it", "fix X" | Edit files locally; run readonly checks, tests, dry-runs |
| "commit" / "commit this" | git add + git commit locally only — no push |
| "push" / "publish" | Push only after an approved commit (or a commit Piero requested) |
| "ship it" / "deploy" | Commit + push + deploy only when Piero clearly includes all needed steps |
Never infer push or deploy from "lets do it" alone.
Git safety
- Never
git push --forcetomain/master. - Never amend unless Piero asks and safety conditions in user rules are met.
- Never update git config.
Production side effects — ask first
Call out and wait before:
git pushtomain(GitHub Actions run from default branch)firebase deploy(Firestore rules, Hosting)- Discovery scripts without
--dry-runagainst production Firestore (reviewQueue, etc.) - Manually dispatching GitHub Actions workflows
- Enabling/re-enabling scheduled workflows on GitHub
After local work
Before commit/push/deploy, summarize:
- What changed (files + purpose)
- Risks (CI, Firestore, noisy queue data, rules)
- Exact next step Piero can approve: commit? push? deploy? dry-run only?
Circeco-specific
- Scheduled discovery:
.github/workflows/monthly-discovery-learning.yml,weekly-events-discovery.yml - Manual admin discovery worker:
.github/workflows/queued-discovery.yml(workflow_dispatchonly) - Production writes:
reviewQueue,discoveryRuns,learningStats,eventReviewMemory* - Prefer
--dry-runfordiscover:events:agentanddiscover:monthlyuntil Piero approves a live run