POLICY · before LLM

SSOT policy layer

Deterministic lint runs before any model call — destructive commands flagged, multi-job inputs split, standing constraints injected every time.

Standing constraints (injected every time)

  • NO rebuild / redeploy / start over if it already exists — wire and fix.
  • One job only — no bundled unrelated work.
  • Do not break anything already working (TLS / live state).
  • Verdicts from receipts only — no build theater.

Policy detects

Destructive shell patterns · multi-job inputs · missing founder decisions (naming, paths, provider choice). Forge surfaces warnings before you waste a Cursor turn.

Law on disk

SSOT v3: brain-os/ssot/SOURCEA_LLM_AGENT_OPERATING_LAW_SSOT_v3.md — Forge is the outbound machine that applies this law to what you send agents.