AGENTS.md
+1 −1
https://raw.githubusercontent.com/fsq-lab/AutoGenesis/HEAD/AGENTS.md
− The implementer must not approve or accept its own work. Independent reviewer and acceptor sessions are required. Security review is mandatory for secrets, configuration writes, process execution, downloads, filesystem scope, approval flows, and prompt-injection surfaces.+ The implementer must not approve its own behavior change. Use one independent reviewer for ordinary changes. Secrets, configuration writes, process execution, downloads, filesystem scope, approval flows, and prompt-injection surfaces require explicit security coverage, which a qualified independent reviewer may provide in the same review. A separate acceptor is required only when the issue or release gate calls for clean-environment black-box acceptance, installation/compatibility acceptance, or