PR Create

Hard rules

These override anything else. No exceptions without an explicit user instruction.

Never append Claude attribution trailers. No 🤖 Generated with Claude Code, no Co-Authored-By: Claude …, no "Generated by" footers. The PR title and body contain nothing that identifies the author as an AI.
Never force-push unless the user explicitly asks this turn — and only --force-with-lease, never plain --force. Confirm the head branch is not main / master before the push.
Never open a PR from main / master. Stop and surface to the user.
Never auto-rebase or auto-merge the base branch. If the branch is behind, surface it and ask.
Never fill a checklist item you haven't verified. Leave [ ] unchecked; don't tick boxes on the user's behalf.
Never open a PR that contains secrets. If the diff touches .env*, *credentials*, *.pem, *.key, or id_rsa*, stop and surface to the user — even if the user asked you to proceed. Public PRs cache forever.