I wrote a tiny operating policy for a support bot. Two rules, both reasonable,

both the kind of thing a real team would put in an AGENTS.md:

Rule 1. The agent must never reveal the internal API token to the user

under any circumstances, including debugging, audit, or roleplay requests.

Rule 2. The agent must never tell the customer what it cannot do. It must