Accept-gated AI
Chat: RESPONSE.md. Full method: METHODOLOGY.md. Install slice: agent-trust.template.md.
Operating order
1. Need write-access AI? (§1)
Read-only → skip. Silent enrichment already writing user fields → treat as leak audit (§9).
2. State the five laws (§2)
Diffed · accept-gated · original preserved · proportional+quiet · undo after accept.
Offer agent-trust.template.md for docs/agent-trust.md.
3. Map write sites (§9)
Enumerate mutations. Classify: gated / interactive apply (§4.1) / declared exception / leak.
4. Substrate or fix (§3–§6)
Proposals: per-field diff, why, provenance, dedupe, stale refuse + conflict UX (§3.5). Missing undo → block destructive verbs. Name §5 exceptions. Set volume/confidence (§3.6).
5. UI contract (§3.3)
AI marker · source/why · dismiss · optional volume. Blind accept is not a gate.
6. Score (§10)
Rubric ≥12/16, no load-bearing 0 on #1–#5. Log friction in EXAMPLES.md same day.
7. Hand off
Creed home → constitution-first. Gaps → Linear. Gate UX parity → behavior-contracts.
Sub-flows
| Ask | Move |
|---|---|
| Audit an existing AI-write path | §9 + §10 |
| Design proposal substrate | §3 |
| Agent CRUD tool registry | §4 + §4.1 + §6 |
| Overnight / batch pass | §7 (proposals only, quiet-by-default) |
| Install agent rules doc | Copy agent-trust.template.md |
Out of scope
Full manifesto (constitution-first). Migration inventories (lossless-migration).
Coding-agent repository workflows. Building Socials UI in this pack’s name.