- [Orchestrator never codes](orchestrator-never-codes.md) — every repo change via an Opus agent; a slip is kept, never reverted
- [Subagents are Opus only](subagents-opus-only.md) — smaller models only for owner-requested read-only scans
- [Relay HUMAN steps in chat](relay-human-steps-in-chat.md) — exact headings and button labels, expected result; owner reads no md files
- [Pull numbers yourself](pull-numbers-yourself.md) — adb pull / run-as / logcat and a summary script; owner reads nothing off the phone
- [Do installs yourself](do-installs-yourself.md) — package check and installDebug without asking when the phone is attached
- [Ask owner to tap](ask-owner-to-tap.md) — no adb force-runs or broadcasts on the real-data app
- [Phone install safety](phone-install-safety.md) — confirm ids; never clear real data; one agent on the phone
- [Local builds only](local-builds-only.md) — no CI; openjdk@25 via PATH; adb full path
- [Stay inside the project folder](stay-inside-project-folder.md) — ask once for anything outside the repo
- [Gradle disk hygiene](gradle-disk-hygiene.md) — caches may be deleted; init script at 7 days; clean-builds.sh
- [Owner-only files](human-todo-owner-only.md) — never read the owner's personal todo
- [One source of truth](one-source-of-truth.md) — one rules file, one handoff, one decisions log
- [Landing protocol](landing-protocol.md) — ff-only, gate, install, remove worktree; numbering in briefs