# Repository Guidelines

- Keep changes small, independently reviewable, and covered by the smallest relevant check.
- Prefer existing code, standard libraries, and native platform features before adding dependencies or abstractions.
- Treat platform responses, webhooks, account data, proxies, and credentials as untrusted or sensitive external input.
- Preserve idempotency and backward compatibility at integration boundaries; document retry and failure behavior.
- Never commit secrets, production credentials, or personal account data.
- Do not add instructions or features for bypassing detection, evading platform risk controls, or violating platform rules.
- When referencing upstream projects, record the source and license, then implement independently unless the license explicitly permits reuse.