rabadon

overview / rules / promise-anti-path

promise-anti-path

The promise swore off this ground: <north_star>.

what it refuses, and what it lets through

Promise: the goal contract enforced IN the session. .rabadon/promise.json declares the project's goal (drift.cpp measures it at session end). An edit on an anti-path is refused; edits outside the promised areas are challenged once per session. No promise, or a broken one: nothing to enforce (fail open).

From the comment in native/gate_pre.h above the code that decides it.

the refusal, as the agent reads it

rabadon BLOCKED this action. Rule: promise-anti-path — the promise swore off this ground: <north_star> <file> matches anti-path '<anti_path>' Adjust the approach instead of retrying the same action. (this rule is sealed: disabled[] does not switch it off. Only the operator, editing .rabadon/promise.json or .rabadon/guard.json by hand, can change what it protects.)

Rendered from the strings in native/gate_pre.h, the rule and the envelope (Judge::refuse) both. A word in <angle brackets> is filled in from the command at the moment it is refused.

in watch mode the same verdict is recorded, and nothing is stopped

rabadon (watch) would have blocked this. Rule: promise-anti-path — the promise swore off this ground: <north_star> <file> matches anti-path '<anti_path>' Nothing was stopped. `rabadon on` makes this a real refusal.

switching it off

Sealed: disabled[] in .rabadon/guard.json does not switch it off, and the refusal does not offer that way out. promise-tamper, promise-anti-path and guard-weaken cannot be switched off by disabled[] (sealed_rule): otherwise a supervised session could list the rules protecting the goal contract as ones it need not obey. They answer only to the operator editing the files by hand, which does not pass through this hook. promise-off-target stays switchable: a once-per-session challenge buys no integrity by being locked, and drift stays on the ledger regardless.

in the field

1 of the 778 records in the published field dataset (field.jsonl, 2026-07-27 to 2026-08-26) carries this id. STOP is a refusal in enforce mode; WOULD_BLOCK is the same verdict recorded in watch mode, where nothing is stopped.

eventrecords
WOULD_BLOCK1

Counted from field.jsonl, the file the field page is built from.

rules

promise-off-target

changelog

rabadon 0.2.4 (11 entries)