1# Global Rules
2 
3> **MANDATORY** — These rules apply to ALL skills. Violations are unacceptable.
4 
5## Rule 1: Destructive Actions Require User Confirmation
6 
7⛔ **ALWAYS use `ask_user`** before ANY destructive action.
8 
9### What is Destructive?
10 
11| Category | Examples |
12|----------|----------|
13| **Delete** | `az group delete`, `azd down`, `rm -rf`, delete resource |
14| **Overwrite** | Replace existing files, overwrite config, reset settings |
15| **Irreversible** | Purge Key Vault, delete storage account, drop database |
16| **Cost Impact** | Provision expensive resources, scale up significantly |
17| **Security** | Expose secrets, change access policies, modify RBAC |
18 
19### How to Confirm
20 
21```
22ask_user(
23  question: "This will permanently delete resource group 'rg-myapp'. Continue?",
24  choices: ["Yes, delete it", "No, cancel"]
25)
26```
27 
28### No Exceptions
29 
30- Do NOT assume user wants to delete/overwrite
31- Do NOT proceed based on "the user asked to deploy" (deploy ≠ delete old)
32- Do NOT batch destructive actions without individual confirmation
33 
34---
35 
36## Rule 2: Never Assume Subscription or Location
37 
38⛔ **ALWAYS use `ask_user`** to confirm:
39- Azure subscription (show actual name and ID)
40- Azure region/location
41