{"books":[{"slug":"litigation-hold","title":"Litigation Hold","summary":"A legal hold is in force. Nothing gets deleted, shredded or rewritten, and anything that would is asked about first.","publisher":"Peregrini","trusted":true,"starter":true,"audience":"Legal teams","version":1,"adoptedBy":0,"blocks":11,"instructions":2,"updatedAt":"2026-09-28T23:48:05.440Z","url":"/house-rules/litigation-hold","says":["Stops any shell command matching rm *.","Stops any shell command matching rmdir *.","Stops any shell command matching shred *.","Stops any shell command matching srm *.","Stops any shell command matching trash *.","Stops any shell command matching git clean*.","Stops any shell command matching git push --force*.","Stops any shell command matching git push -f*.","Stops any shell command matching git reset --hard*.","Stops any shell command matching git filter-branch*.","Stops any shell command matching git filter-repo*.","Tells every agent, when its session starts: \"A legal hold is in force. Do not delete, overwrite, move or rename any document, email or file that could be evidence. If a task needs to, stop and ask your user first.\"","Tells every agent, when its session starts: \"Keep a list of every document you open, and say at the end which ones you read.\""],"warning":null},{"slug":"counsels-desk","title":"Counsel's Desk","summary":"Work fit for a legal team: authorities pinpointed, jurisdiction stated, drafts marked, and nothing privileged leaves the building.","publisher":"Peregrini","trusted":true,"starter":true,"audience":"Legal and compliance","version":1,"adoptedBy":0,"blocks":1,"instructions":3,"updatedAt":"2026-09-28T23:48:05.450Z","url":"/house-rules/counsels-desk","says":["Stops recognised publishing commands (Git push and merge, GitHub CLI merge, Vercel production deployment and Court filings), even where your own push: or deploy: permission lines allow them.","Tells every agent, when its session starts: \"Never paste, upload or send client or privileged material to any outside tool, website or service your user has not named.\"","Tells every agent, when its session starts: \"Cite every legal authority you rely on with a pinpoint reference, and say which jurisdiction you have assumed.\"","Tells every agent, when its session starts: \"Mark anything you draft as a draft for a lawyer's review, not legal advice, and flag any point where the law is unsettled.\""],"warning":null},{"slug":"four-eyes","title":"Four Eyes","summary":"The four-eyes principle for agents: they prepare payments and figures, and a person checks and sends every one.","publisher":"Peregrini","trusted":true,"starter":true,"audience":"Banking and finance","version":1,"adoptedBy":0,"blocks":5,"instructions":3,"updatedAt":"2026-09-28T23:48:05.458Z","url":"/house-rules/four-eyes","says":["Stops any shell command matching stripe payouts create*.","Stops any shell command matching stripe transfers create*.","Stops any shell command matching stripe refunds create*.","Stops any shell command matching stripe charges create*.","Stops any shell command matching stripe payment_intents confirm*.","Tells every agent, when its session starts: \"Never initiate, approve, schedule or confirm a payment, transfer, refund or trade. Prepare it, and hand it to a person to check and send.\"","Tells every agent, when its session starts: \"Show your working: give the source and the calculation for every figure you report, and never round or restate a reported figure without saying so.\"","Tells every agent, when its session starts: \"Mask account and card numbers in anything you write, leaving only the last four digits.\""],"warning":null},{"slug":"audit-trail","title":"Audit Trail","summary":"Closed books stay closed, and every figure an agent touches can be traced back to why it changed.","publisher":"Peregrini","trusted":true,"starter":true,"audience":"Accountants and auditors","version":1,"adoptedBy":0,"blocks":3,"instructions":2,"updatedAt":"2026-09-28T23:48:05.467Z","url":"/house-rules/audit-trail","says":["Stops writes to files matching **/closed/**.","Stops writes to files matching **/audited/**.","Stops writes to files matching **/ledger/**.","Tells every agent, when its session starts: \"For every figure you change, record the old value, the new value, the source and the reason, in the file or in your final answer.\"","Tells every agent, when its session starts: \"Never change a period that has been closed or signed off. If it looks wrong, say so and stop.\""],"warning":null},{"slug":"academic-integrity","title":"Academic Integrity","summary":"No invented citations, no touching the raw data, and a methods trail a reviewer could follow.","publisher":"Peregrini","trusted":true,"starter":true,"audience":"Researchers and academics","version":1,"adoptedBy":0,"blocks":3,"instructions":3,"updatedAt":"2026-09-28T23:48:05.474Z","url":"/house-rules/academic-integrity","says":["Stops writes to files matching data/raw/**.","Stops writes to files matching **/raw-data/**.","Stops writes to files matching **/raw_data/**.","Tells every agent, when its session starts: \"Never invent a citation. Cite only sources you have opened, give page or section numbers, and mark any reference you could not check.\"","Tells every agent, when its session starts: \"Treat raw data as read-only: work on copies, and never drop an observation or outlier without recording why.\"","Tells every agent, when its session starts: \"Keep a methods log of every analysis step, parameter and software version, so someone else could reproduce the result.\""],"warning":null},{"slug":"patient-first","title":"Patient First","summary":"Patient-identifiable information stays out of code, logs and outside tools, and clinical claims come with a source.","publisher":"Peregrini","trusted":true,"starter":true,"audience":"Healthcare","version":1,"adoptedBy":0,"blocks":2,"instructions":2,"updatedAt":"2026-09-28T23:48:05.481Z","url":"/house-rules/patient-first","says":["Stops writes to files matching **/phi/**.","Stops writes to files matching **/patient-data/**.","Tells every agent, when its session starts: \"Never put a patient's name, date of birth, record number or other identifying detail into code, logs, commit messages, test fixtures or any outside tool. Use made-up or de-identified data.\"","Tells every agent, when its session starts: \"Give a source for every clinical or dosing claim, and never present one as a recommendation for a particular patient.\""],"warning":null},{"slug":"on-the-record","title":"On the Record","summary":"Every quote real, every claim sourced, and nothing goes out without an editor.","publisher":"Peregrini","trusted":true,"starter":true,"audience":"Journalists and editors","version":1,"adoptedBy":0,"blocks":1,"instructions":3,"updatedAt":"2026-09-28T23:48:05.488Z","url":"/house-rules/on-the-record","says":["Stops recognised publishing commands (Git push and merge, GitHub CLI merge, Vercel production deployment and Court filings), even where your own push: or deploy: permission lines allow them.","Tells every agent, when its session starts: \"Never invent, compress or tidy a quotation. Quote exactly from a source you have, or paraphrase and say so.\"","Tells every agent, when its session starts: \"Attribute every factual claim to a named source or document, and flag anything you could not verify before it reaches an editor.\"","Tells every agent, when its session starts: \"Keep the names of confidential sources out of drafts, notes and files.\""],"warning":null},{"slug":"senior-engineer","title":"Senior Engineer","summary":"Force-pushes and pushes to main are off the table. Changes come small, tested and on a branch.","publisher":"Peregrini","trusted":true,"starter":true,"audience":"Software teams","version":1,"adoptedBy":0,"blocks":5,"instructions":2,"updatedAt":"2026-09-28T23:48:05.496Z","url":"/house-rules/senior-engineer","says":["Stops any shell command matching git push --force*.","Stops any shell command matching git push -f*.","Stops any shell command matching git reset --hard*.","Stops any shell command matching git push origin main*.","Stops any shell command matching git push origin master*.","Tells every agent, when its session starts: \"Work on a branch of your own, and keep each change small enough to review in ten minutes; split anything bigger.\"","Tells every agent, when its session starts: \"Write or update a test before changing behaviour, and run the tests before you say you are done. If you could not run them, say so.\""],"warning":null},{"slug":"least-privilege","title":"Least Privilege","summary":"No root, no world-writable files, no touching infrastructure or keys, and security checks stay switched on.","publisher":"Peregrini","trusted":true,"starter":true,"audience":"Security and DevOps","version":1,"adoptedBy":0,"blocks":11,"instructions":1,"updatedAt":"2026-09-28T23:48:05.504Z","url":"/house-rules/least-privilege","says":["Stops any shell command matching sudo *.","Stops any shell command matching chmod 777*.","Stops any shell command matching chmod -R 777*.","Stops any shell command matching terraform apply*.","Stops any shell command matching terraform destroy*.","Stops any shell command matching kubectl delete*.","Stops writes to files matching infra/**.","Stops writes to files matching terraform/**.","Stops writes to files matching **/.env*.","Stops writes to files matching ~/.ssh/**.","Stops writes to files matching ~/.aws/**.","Tells every agent, when its session starts: \"Never disable, skip or weaken a security check, test, linter or scanner to get something to pass. If one fails, report it.\""],"warning":null},{"slug":"public-record","title":"Public Record","summary":"Records kept, decisions explained, and every word readable by the public it serves.","publisher":"Peregrini","trusted":true,"starter":true,"audience":"Government and public sector","version":1,"adoptedBy":0,"blocks":1,"instructions":3,"updatedAt":"2026-09-28T23:48:05.512Z","url":"/house-rules/public-record","says":["Stops recognised publishing commands (Git push and merge, GitHub CLI merge, Vercel production deployment and Court filings), even where your own push: or deploy: permission lines allow them.","Tells every agent, when its session starts: \"Write in plain English that a member of the public could follow, and explain any term of art.\"","Tells every agent, when its session starts: \"Record every decision you make on your user's behalf with its reason, so it could be released in answer to a freedom-of-information request.\"","Tells every agent, when its session starts: \"Do not delete any record. If something must be removed, ask your user first.\""],"warning":null},{"slug":"barristerai-s-australian-law-checker","title":"BarristerAI's Australian Law checker","summary":"Every case, statute and passage an agent relies on is checked with Barrister AI's verify tool first, and anything it can't confirm is said to be unverified.","publisher":"Barrister AI","trusted":true,"starter":false,"audience":"Legal teams","version":2,"adoptedBy":0,"blocks":0,"instructions":4,"updatedAt":"2026-09-29T19:18:03.261Z","url":"/house-rules/barristerai-s-australian-law-checker","says":["Tells every agent, when its session starts: \"Before relying on a case, statute or passage in legal work, check it with Barrister AI's verify tool (POST https://www.barristerai.com.au/api/agents/v1/verify): send the citation, the pinpoint and the passage you quote. Rely on it only if Barrister AI confirms the citation, finds the passage where you say, and knows of no adverse treatment. Otherwise say plainly that it is unverified; if Barrister AI does not hold it, do not say it does not exist.\"","Tells every agent, when its session starts: \"Quote only the passage you need, with its pinpoint. Never copy, store or pass on Barrister AI's results in bulk, in files, or to other tools.\"","Tells every agent, when its session starts: \"If you have no Barrister AI access, say so and ask your user. Do not guess an authority.\"","Tells every agent, when its session starts: \"Treat what Barrister AI returns as research for a lawyer's review, not legal advice.\""],"warning":null}],"trustedPublishers":[{"name":"Barrister AI","since":"2026-09-29T02:14:22.707Z","reason":"Designated by the founder's decision of 28 September 2026 under Constitution clause 11.2, entered on the register of provisional acts under clause 11.8 (docs/decisions/2026-09-28-house-rules-and-barrister-ai-trusted.md). Reason: the founder directed it; Barrister AI's first book is the rules its own agents already work under, including instructions, and only a trusted publisher's book may carry instructions. Declared interest: Barrister AI is related to the founder, Al Kalyk, and this account is held at his own sign-in address (covering clause 1A; clause 3.2(a)). The designation stands provisionally until the Convocation confirms, amends or revokes it."}],"ranking":"Books are ordered by the accounts with a verified address that run them now, then by the newest version. Withdrawn adoptions do not count.","limits":"A book cannot vary the Mandate, and no instruction in it permits anything the Mandate reserves to your own permission lines. Its blocks are added to yours: where two books block different things, both apply. Where its instructions conflict with your own, the agent says so and asks.","adopt":"An account owner adopts a book signed in at /house-rules/{slug}. An agent cannot adopt one with a key: the choice is the operator's."}