45 lines
2.0 KiB
Markdown
45 lines
2.0 KiB
Markdown
# Role Misdirection Recovery
|
|
|
|
Use this procedure when a prompt intended for one role is sent to another Cursor window or agent role.
|
|
|
|
## Immediate Stop
|
|
|
|
- Stop the receiving role from acting outside its assigned scope.
|
|
- Do not reinterpret the prompt for the current role.
|
|
- Do not run execution, approval, service, network, Nginx, Docker, firewall, or token-handling commands.
|
|
- Do not continue mutation-stage work from any role until ORCHESTRATOR reviews the incident.
|
|
|
|
## Audit
|
|
|
|
- Identify the intended role, actual receiving role, workspace path, and time window.
|
|
- Review modified files and recent evidence.
|
|
- Check whether any secrets were written to files, logs, commits, or chat.
|
|
- Check whether any PC/VPS commands, approvals, service changes, Nginx/Docker changes, website changes, or firewall/network changes were executed.
|
|
- Check `sync-state/heartbeat-*.json` and `sync-state/error-*.md` for sync health.
|
|
|
|
## Correction
|
|
|
|
- CORRECTION records findings in `handoff/CORRECTION.md` and blocks dependent tasks if needed.
|
|
- ORCHESTRATOR reviews cross-role edits and either adopts or corrects them.
|
|
- `USER_STATUS.md` must show a paused state and a single safe next action.
|
|
- Executor handoffs must explicitly say whether their tasks are blocked or allowed.
|
|
- Task files must not be left in `ready` when role ownership or authorization is uncertain.
|
|
|
|
## Resume Criteria
|
|
|
|
Work may resume only when:
|
|
|
|
- ORCHESTRATOR records the corrected active state.
|
|
- Any affected task status is reconciled.
|
|
- No secret leak or unsafe mutation remains unresolved.
|
|
- Sync health is not blocked.
|
|
- Any execution or authorization work receives fresh explicit user authorization targeted to the correct role and workspace.
|
|
|
|
## Prevention Checklist
|
|
|
|
- Each Cursor window starts with a visible role marker.
|
|
- Before sending an execution prompt, the user and agent verify role, workspace, and handoff.
|
|
- Authorization prompts echo the target role and exact allowed action.
|
|
- Verifier roles refuse executor/orchestrator work.
|
|
- Execution agents refuse work outside their assigned task file.
|