Keep copy plain and use American English. Preserve the meaning of every count, its coverage, and its source links. Never infer developer skill or AI authorship. Use Node 22+ for runtime, Bun for pinned development dependencies, and keep the npm package private with its publication refusal. Tests must stay offline. Before deployment, verify the Cloudflare account, exact domain, and Access policy. workers.dev and preview URLs stay disabled while SSO is required. Keep configured GitHub tokens server-only. Never discover local CLI credentials at runtime or put credential values in source, browser responses, or logs. Do not post to repositories or social accounts. Run build, typecheck, and tests for logic changes; check affected browser layouts.