Salon_Assistant/.grok/rules/execution-loop.md

Execution loop (mandatory — Salon_Assistant)

Full SSOT: repository root AGENTS.md → Execution loop (mandatory) and Git hygiene (mandatory).

This rule exists so agents stay on rails without the user naming every slash command.

Default loop

Authorize → Plan (if needed) → Build → Review → Check → Local commit (only if asked) → User pushes

Hard rails

1. No product implementation until the user says build or implement. Docs/design/agent-rules work is fine without that.
2. Do not require the user to restate process. If they authorize a slice, run plan (when needed) → build → independent review → check yourself.
3. Grok parent = orchestrator only. All product work (implement / review / check / explore / fix) runs on local wwg3-worker subagents. See local-worker.md.
4. Review + check on multi-file / non-trivial work via worker subagents (model: "wwg3-worker"). Prefer /review + /check-work patterns that spawn workers. Parent self-LGTM is not enough.
5. Commit only when asked. Never push, open/merge PR, or tag unless the user explicitly orders it. User owns git push by default.
6. Scope lock. Implement only the authorized slice. No drive-by packages, no silent redesign of design/ SSOT.
7. Subagents: model: "wwg3-worker" always (unless user overrides). Implementers edit; reviewers/explorers/verifiers read-only. Parallel writers use worktrees. Inject product hard rules into every worker prompt.
8. Multi-PR / execute-plan: only with a PR Plan DAG; --dry-run first; no Graphite default, no auto-PR, no push/merge unless user overrides. Workers stay on wwg3-worker. Remote MCP = gitea_vps only.
9. Stop when the slice is done, blocked on a user decision, local worker is down, or secrets / destructive git / forge mistakes would be required — report, do not steamroll onto paid Grok.
10. Platform-first: nemohermes / openshell only; no parallel control API; no owner terminal/Docker instructions; no agent pay / silent send.

Tiny exception

Trivial one-file typo/docs nit: plan optional; still no unauthorized build; still no push; still no secrets.