Local first

Always on for every agent that loads HeyEddi skills (Cursor, Claude, Codex, Cloud Run, or any other host). Edit code and Terraform in the repo. Check the plan. Do not change live systems.

This is the same kind of gate as verify_setup --check. The script exits 1 on a live mutation. Do not run that command.

Hard gate

Before any Terraform, OpenTofu, Pulumi, gcloud, GAM, Firebase, kubectl, Helm, aws, gsutil, bq, or Google API write, run:

python .agents/skills/heyeddi-local-first/scripts/classify_command.py --check --command "<the exact command>"

From this hub, the script path is skills/heyeddi-local-first/scripts/classify_command.py.