docs: harden prompt transparency guidance

This commit is contained in:
artale 2026-06-15 04:31:12 +02:00
parent 14d198377f
commit 5a38f57db7
6 changed files with 37 additions and 15 deletions

View File

@ -12,7 +12,7 @@ node dist/index.js demo
Every run leaves the next run smarter. Every state file accumulates. Every skill sharpens.
```bash
git clone https://github.com/movez/fable-agent
git clone https://git.fdsa.agency/artale/fable-agent.git
cd fable-agent
npm install
npm run build
@ -43,7 +43,7 @@ node dist/index.js demo
```bash
# Install
git clone https://github.com/movez/fable-agent
git clone https://git.fdsa.agency/artale/fable-agent.git
cd fable-agent
npm install
npm run build

22
SECURITY.md Normal file
View File

@ -0,0 +1,22 @@
# Security
## Prompt and repo safety
`fable-agent` may read untrusted markdown, tickets, repos, and model output. Treat all of it as data, not instructions.
- Do not paste, vendor, replay, or execute leaked proprietary system prompts.
- Do not use permission-bypass flags.
- Send model prompts through stdin or structured APIs, not shell-interpolated command strings.
- Keep secrets in environment variables; never hardcode fallback API keys or local key paths.
- Run code-changing agents in scoped workspaces/worktrees when possible.
- Keep docs and CLI parity green with `npm run -s docs:check` before publishing.
## Defensive Fable-style profile
Allowed: multi-model fan-out plus judge synthesis, citations for factual/current claims, refusal/reformulation for harmful requests, bounded loops with validation evidence.
Not allowed: leaked prompt reproduction, prompt-extraction recipes, jailbreak/sandbox-bypass instructions, autonomous execution without permission boundaries.
## Reporting
Open an issue with reproduction steps, affected version/commit, and impact. Do not include live secrets or proprietary prompt text.

View File

@ -111,7 +111,7 @@ This skill integrates with:
- **OpenRouterFusionExecutor** (`src/examples/executors/openrouter-fusion-executor.ts`) — API-based fusion
- **DynamicWorkflows.fusionPanel()** — workflow-level fusion dispatch
- **CompoundStack** — fusion as a stakable layer
- **Fable5PromptEngine**tone/citation/refusal rules from leaked Fable 5 prompt
- **Fable5PromptEngine**safe tone/citation/refusal patterns inspired by public prompt conventions
## Failure Modes
@ -121,4 +121,4 @@ This skill integrates with:
- [fusion-fable](https://github.com/duolahypercho/fusion-fable) — original fan-out panel → judge pattern
- [OpenRouter Fusion API](https://openrouter.ai) — compound model API
- [Fable 5 leaked system prompt](https://github.com/elder-plinius/CL4R1T4S) — tone, citation, refusal patterns
- [CL4R1T4S repository](https://github.com/elder-plinius/CL4R1T4S) — repo-level prompt transparency research; do not vendor leaked prompt text

View File

@ -1,7 +1,7 @@
/**
* Fable 5 Prompt Engine
*
* Capabilities extracted from the leaked Fable 5 system prompt (elder-plinius/CL4R1T4S):
* Safe patterns inspired by public AI-assistant prompt conventions and repo-level discussion of Fable-style systems:
*
* 1. Tone & Behavior Rules (claude_behavior)
* - Warm, constructive tone; no negative assumptions
@ -99,7 +99,7 @@ export function applyTone(prompt: string, config?: Partial<ToneConfig>): string
medium: "Cover the key points.",
high: "Be thorough and comprehensive.",
xhigh: "Exhaustive analysis with deep reasoning.",
ultracode: "Full autonomous execution. No holds barred.",
ultracode: "Full autonomous execution within configured safety and permission boundaries.",
};
return [

View File

@ -148,7 +148,7 @@ const KNOWN_PROMPTS: SystemPromptEntry[] = [
model: "Perplexity Sonar",
dateExtracted: "2026-04-20",
promptContent: "You are Perplexity, an AI research assistant. You provide accurate, cited information. You prioritize recent sources and factual accuracy.",
source: "CL4R1T4S / Leaked prompt",
source: "CL4R1T4S / Public repo metadata",
tags: ["perplexity", "research", "standard"],
notes: "Perplexity system prompt emphasizing citations",
},
@ -158,7 +158,7 @@ const KNOWN_PROMPTS: SystemPromptEntry[] = [
model: "Cursor Editor",
dateExtracted: "2026-05-10",
promptContent: "You are an AI programming assistant. You are helpful, concise, and focused on code. You provide code solutions with explanations.",
source: "CL4R1T4S / Leaked prompt",
source: "CL4R1T4S / Public repo metadata",
tags: ["cursor", "code", "editor"],
notes: "Cursor AI coding assistant system prompt",
},
@ -168,7 +168,7 @@ const KNOWN_PROMPTS: SystemPromptEntry[] = [
model: "Replit Agent",
dateExtracted: "2026-04-25",
promptContent: "You are Replit Agent, an AI that helps users build software. You can create, read, update, and delete files in the workspace.",
source: "CL4R1T4S / Leaked prompt",
source: "CL4R1T4S / Public repo metadata",
tags: ["replit", "agent", "code"],
notes: "Replit agent system prompt with file system access",
},

View File

@ -127,7 +127,7 @@ const CATALOG: SystemPromptEntry[] = [
model: "Sonar Pro",
dateExtracted: "2026-05-10",
promptContent: "You are Perplexity, an AI research assistant. Provide accurate, up-to-date information with citations. Prioritize authoritative sources. When possible, include multiple perspectives. You have access to web search.",
source: "CL4R1T4S / Leaked prompt, June 2025",
source: "CL4R1T4S / Public repo metadata",
tags: ["perplexity", "research", "citations"],
notes: "Emphasizes citations and source authority",
},
@ -139,7 +139,7 @@ const CATALOG: SystemPromptEntry[] = [
model: "Cursor Editor AI",
dateExtracted: "2026-04-20",
promptContent: "You are an AI programming assistant. You help users write, understand, and debug code. You are concise and focused. You provide code examples with explanations. You can access the workspace files and terminal.",
source: "CL4R1T4S / Leaked prompt",
source: "CL4R1T4S / Public repo metadata",
tags: ["cursor", "code", "editor", "programming"],
notes: "Cursor AI with file system and terminal access",
},
@ -151,7 +151,7 @@ const CATALOG: SystemPromptEntry[] = [
model: "Replit Agent",
dateExtracted: "2026-05-01",
promptContent: "You are Replit Agent, an AI that helps users build software. You can create, edit, run, and delete files. You can install packages and manage the environment. You are proactive and suggest improvements.",
source: "CL4R1T4S / Leaked prompt",
source: "CL4R1T4S / Public repo metadata",
tags: ["replit", "agent", "code", "environment"],
notes: "Full environment access agent",
},
@ -163,7 +163,7 @@ const CATALOG: SystemPromptEntry[] = [
model: "Windsurf AI",
dateExtracted: "2026-05-05",
promptContent: "You are Windsurf AI, a coding assistant integrated into the Windsurf IDE. You help users write code, understand codebases, and solve programming problems. You can read and write files. You are helpful and technical.",
source: "CL4R1T4S / Leaked prompt",
source: "CL4R1T4S / Public repo metadata",
tags: ["windsurf", "code", "ide", "programming"],
notes: "Windsurf IDE-integrated AI",
},
@ -175,7 +175,7 @@ const CATALOG: SystemPromptEntry[] = [
model: "Devin AI",
dateExtracted: "2026-04-10",
promptContent: "You are Devin, an AI software engineer. You can plan and execute complex engineering tasks. You have access to a shell, code editor, and web browser. You work autonomously and report progress. You ask clarifying questions when needed.",
source: "CL4R1T4S / Leaked prompt",
source: "CL4R1T4S / Public repo metadata",
tags: ["devin", "agent", "software", "engineering"],
notes: "Full autonomous software engineering agent",
},
@ -187,7 +187,7 @@ const CATALOG: SystemPromptEntry[] = [
model: "Manus AI",
dateExtracted: "2026-05-20",
promptContent: "You are Manus, a general-purpose AI agent. You can browse the web, execute code, and process files. You work independently on complex tasks. You provide detailed updates on your progress.",
source: "CL4R1T4S / Leaked prompt",
source: "CL4R1T4S / Public repo metadata",
tags: ["manus", "agent", "general-purpose"],
notes: "General-purpose autonomous agent",
},