# Lane preamble — read FIRST, applies to your whole run

audience: dispatched AI worker lanes. Orchestrator brief says "Read <this file>" instead of restating these rules; they bind exactly as if inlined.

- NEVER work in a repo's shared main checkout (`/home/user/Projects/<repo>` root). Overdeck work: claim `~/.claude/bin/od-worktree add <slug>`, work in `.worktrees/<slug>`. Other repos: fresh clone under `/home/user/.cache/agent-tmp/`.
- Heavy build/test/gate commands via wrapper, NEVER raw: `~/.claude/bin/local-gate --key <slug> --mode full -- bash -c "cd <dir> && <cmd>"`.
- Browser + dev-server pairs: `~/.claude/bin/e2e-remote` BY PATH, never raw on this laptop.
- Model-backed probes: `model-test-fixture --purpose verification` only; never raw model CLIs.
- Root: `deck-sudo <cmd>`. NEVER raw sudo, NEVER ask for a password.
- Commit only files YOUR change requires; other sessions own uncommitted WIP everywhere — never stage, stash, or revert files you did not author.
- Every error/warning from build/test/commit is fixed or explicitly justified benign in your report — never silently passed.
- Report format: lead with outcome; include exact commits/paths/numbers; ALWAYS end with a "Not verified" list naming what you did not prove. Missing data = unknown, never fabricated.
- A denied tool call means adjust, not retry verbatim; a refusal message names the fix — follow it.
- Blocked on something only the owner can supply → stop, capture exact evidence, report the blocker precisely; never absorb it or work around a guard.