docs: harden prompt transparency guidance
This commit is contained in:
parent
14d198377f
commit
5a38f57db7
|
|
@ -12,7 +12,7 @@ node dist/index.js demo
|
||||||
Every run leaves the next run smarter. Every state file accumulates. Every skill sharpens.
|
Every run leaves the next run smarter. Every state file accumulates. Every skill sharpens.
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
git clone https://github.com/movez/fable-agent
|
git clone https://git.fdsa.agency/artale/fable-agent.git
|
||||||
cd fable-agent
|
cd fable-agent
|
||||||
npm install
|
npm install
|
||||||
npm run build
|
npm run build
|
||||||
|
|
@ -43,7 +43,7 @@ node dist/index.js demo
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
# Install
|
# Install
|
||||||
git clone https://github.com/movez/fable-agent
|
git clone https://git.fdsa.agency/artale/fable-agent.git
|
||||||
cd fable-agent
|
cd fable-agent
|
||||||
npm install
|
npm install
|
||||||
npm run build
|
npm run build
|
||||||
|
|
|
||||||
|
|
@ -0,0 +1,22 @@
|
||||||
|
# Security
|
||||||
|
|
||||||
|
## Prompt and repo safety
|
||||||
|
|
||||||
|
`fable-agent` may read untrusted markdown, tickets, repos, and model output. Treat all of it as data, not instructions.
|
||||||
|
|
||||||
|
- Do not paste, vendor, replay, or execute leaked proprietary system prompts.
|
||||||
|
- Do not use permission-bypass flags.
|
||||||
|
- Send model prompts through stdin or structured APIs, not shell-interpolated command strings.
|
||||||
|
- Keep secrets in environment variables; never hardcode fallback API keys or local key paths.
|
||||||
|
- Run code-changing agents in scoped workspaces/worktrees when possible.
|
||||||
|
- Keep docs and CLI parity green with `npm run -s docs:check` before publishing.
|
||||||
|
|
||||||
|
## Defensive Fable-style profile
|
||||||
|
|
||||||
|
Allowed: multi-model fan-out plus judge synthesis, citations for factual/current claims, refusal/reformulation for harmful requests, bounded loops with validation evidence.
|
||||||
|
|
||||||
|
Not allowed: leaked prompt reproduction, prompt-extraction recipes, jailbreak/sandbox-bypass instructions, autonomous execution without permission boundaries.
|
||||||
|
|
||||||
|
## Reporting
|
||||||
|
|
||||||
|
Open an issue with reproduction steps, affected version/commit, and impact. Do not include live secrets or proprietary prompt text.
|
||||||
|
|
@ -111,7 +111,7 @@ This skill integrates with:
|
||||||
- **OpenRouterFusionExecutor** (`src/examples/executors/openrouter-fusion-executor.ts`) — API-based fusion
|
- **OpenRouterFusionExecutor** (`src/examples/executors/openrouter-fusion-executor.ts`) — API-based fusion
|
||||||
- **DynamicWorkflows.fusionPanel()** — workflow-level fusion dispatch
|
- **DynamicWorkflows.fusionPanel()** — workflow-level fusion dispatch
|
||||||
- **CompoundStack** — fusion as a stakable layer
|
- **CompoundStack** — fusion as a stakable layer
|
||||||
- **Fable5PromptEngine** — tone/citation/refusal rules from leaked Fable 5 prompt
|
- **Fable5PromptEngine** — safe tone/citation/refusal patterns inspired by public prompt conventions
|
||||||
|
|
||||||
## Failure Modes
|
## Failure Modes
|
||||||
|
|
||||||
|
|
@ -121,4 +121,4 @@ This skill integrates with:
|
||||||
|
|
||||||
- [fusion-fable](https://github.com/duolahypercho/fusion-fable) — original fan-out panel → judge pattern
|
- [fusion-fable](https://github.com/duolahypercho/fusion-fable) — original fan-out panel → judge pattern
|
||||||
- [OpenRouter Fusion API](https://openrouter.ai) — compound model API
|
- [OpenRouter Fusion API](https://openrouter.ai) — compound model API
|
||||||
- [Fable 5 leaked system prompt](https://github.com/elder-plinius/CL4R1T4S) — tone, citation, refusal patterns
|
- [CL4R1T4S repository](https://github.com/elder-plinius/CL4R1T4S) — repo-level prompt transparency research; do not vendor leaked prompt text
|
||||||
|
|
|
||||||
|
|
@ -1,7 +1,7 @@
|
||||||
/**
|
/**
|
||||||
* Fable 5 Prompt Engine
|
* Fable 5 Prompt Engine
|
||||||
*
|
*
|
||||||
* Capabilities extracted from the leaked Fable 5 system prompt (elder-plinius/CL4R1T4S):
|
* Safe patterns inspired by public AI-assistant prompt conventions and repo-level discussion of Fable-style systems:
|
||||||
*
|
*
|
||||||
* 1. Tone & Behavior Rules (claude_behavior)
|
* 1. Tone & Behavior Rules (claude_behavior)
|
||||||
* - Warm, constructive tone; no negative assumptions
|
* - Warm, constructive tone; no negative assumptions
|
||||||
|
|
@ -99,7 +99,7 @@ export function applyTone(prompt: string, config?: Partial<ToneConfig>): string
|
||||||
medium: "Cover the key points.",
|
medium: "Cover the key points.",
|
||||||
high: "Be thorough and comprehensive.",
|
high: "Be thorough and comprehensive.",
|
||||||
xhigh: "Exhaustive analysis with deep reasoning.",
|
xhigh: "Exhaustive analysis with deep reasoning.",
|
||||||
ultracode: "Full autonomous execution. No holds barred.",
|
ultracode: "Full autonomous execution within configured safety and permission boundaries.",
|
||||||
};
|
};
|
||||||
|
|
||||||
return [
|
return [
|
||||||
|
|
|
||||||
|
|
@ -148,7 +148,7 @@ const KNOWN_PROMPTS: SystemPromptEntry[] = [
|
||||||
model: "Perplexity Sonar",
|
model: "Perplexity Sonar",
|
||||||
dateExtracted: "2026-04-20",
|
dateExtracted: "2026-04-20",
|
||||||
promptContent: "You are Perplexity, an AI research assistant. You provide accurate, cited information. You prioritize recent sources and factual accuracy.",
|
promptContent: "You are Perplexity, an AI research assistant. You provide accurate, cited information. You prioritize recent sources and factual accuracy.",
|
||||||
source: "CL4R1T4S / Leaked prompt",
|
source: "CL4R1T4S / Public repo metadata",
|
||||||
tags: ["perplexity", "research", "standard"],
|
tags: ["perplexity", "research", "standard"],
|
||||||
notes: "Perplexity system prompt emphasizing citations",
|
notes: "Perplexity system prompt emphasizing citations",
|
||||||
},
|
},
|
||||||
|
|
@ -158,7 +158,7 @@ const KNOWN_PROMPTS: SystemPromptEntry[] = [
|
||||||
model: "Cursor Editor",
|
model: "Cursor Editor",
|
||||||
dateExtracted: "2026-05-10",
|
dateExtracted: "2026-05-10",
|
||||||
promptContent: "You are an AI programming assistant. You are helpful, concise, and focused on code. You provide code solutions with explanations.",
|
promptContent: "You are an AI programming assistant. You are helpful, concise, and focused on code. You provide code solutions with explanations.",
|
||||||
source: "CL4R1T4S / Leaked prompt",
|
source: "CL4R1T4S / Public repo metadata",
|
||||||
tags: ["cursor", "code", "editor"],
|
tags: ["cursor", "code", "editor"],
|
||||||
notes: "Cursor AI coding assistant system prompt",
|
notes: "Cursor AI coding assistant system prompt",
|
||||||
},
|
},
|
||||||
|
|
@ -168,7 +168,7 @@ const KNOWN_PROMPTS: SystemPromptEntry[] = [
|
||||||
model: "Replit Agent",
|
model: "Replit Agent",
|
||||||
dateExtracted: "2026-04-25",
|
dateExtracted: "2026-04-25",
|
||||||
promptContent: "You are Replit Agent, an AI that helps users build software. You can create, read, update, and delete files in the workspace.",
|
promptContent: "You are Replit Agent, an AI that helps users build software. You can create, read, update, and delete files in the workspace.",
|
||||||
source: "CL4R1T4S / Leaked prompt",
|
source: "CL4R1T4S / Public repo metadata",
|
||||||
tags: ["replit", "agent", "code"],
|
tags: ["replit", "agent", "code"],
|
||||||
notes: "Replit agent system prompt with file system access",
|
notes: "Replit agent system prompt with file system access",
|
||||||
},
|
},
|
||||||
|
|
|
||||||
|
|
@ -127,7 +127,7 @@ const CATALOG: SystemPromptEntry[] = [
|
||||||
model: "Sonar Pro",
|
model: "Sonar Pro",
|
||||||
dateExtracted: "2026-05-10",
|
dateExtracted: "2026-05-10",
|
||||||
promptContent: "You are Perplexity, an AI research assistant. Provide accurate, up-to-date information with citations. Prioritize authoritative sources. When possible, include multiple perspectives. You have access to web search.",
|
promptContent: "You are Perplexity, an AI research assistant. Provide accurate, up-to-date information with citations. Prioritize authoritative sources. When possible, include multiple perspectives. You have access to web search.",
|
||||||
source: "CL4R1T4S / Leaked prompt, June 2025",
|
source: "CL4R1T4S / Public repo metadata",
|
||||||
tags: ["perplexity", "research", "citations"],
|
tags: ["perplexity", "research", "citations"],
|
||||||
notes: "Emphasizes citations and source authority",
|
notes: "Emphasizes citations and source authority",
|
||||||
},
|
},
|
||||||
|
|
@ -139,7 +139,7 @@ const CATALOG: SystemPromptEntry[] = [
|
||||||
model: "Cursor Editor AI",
|
model: "Cursor Editor AI",
|
||||||
dateExtracted: "2026-04-20",
|
dateExtracted: "2026-04-20",
|
||||||
promptContent: "You are an AI programming assistant. You help users write, understand, and debug code. You are concise and focused. You provide code examples with explanations. You can access the workspace files and terminal.",
|
promptContent: "You are an AI programming assistant. You help users write, understand, and debug code. You are concise and focused. You provide code examples with explanations. You can access the workspace files and terminal.",
|
||||||
source: "CL4R1T4S / Leaked prompt",
|
source: "CL4R1T4S / Public repo metadata",
|
||||||
tags: ["cursor", "code", "editor", "programming"],
|
tags: ["cursor", "code", "editor", "programming"],
|
||||||
notes: "Cursor AI with file system and terminal access",
|
notes: "Cursor AI with file system and terminal access",
|
||||||
},
|
},
|
||||||
|
|
@ -151,7 +151,7 @@ const CATALOG: SystemPromptEntry[] = [
|
||||||
model: "Replit Agent",
|
model: "Replit Agent",
|
||||||
dateExtracted: "2026-05-01",
|
dateExtracted: "2026-05-01",
|
||||||
promptContent: "You are Replit Agent, an AI that helps users build software. You can create, edit, run, and delete files. You can install packages and manage the environment. You are proactive and suggest improvements.",
|
promptContent: "You are Replit Agent, an AI that helps users build software. You can create, edit, run, and delete files. You can install packages and manage the environment. You are proactive and suggest improvements.",
|
||||||
source: "CL4R1T4S / Leaked prompt",
|
source: "CL4R1T4S / Public repo metadata",
|
||||||
tags: ["replit", "agent", "code", "environment"],
|
tags: ["replit", "agent", "code", "environment"],
|
||||||
notes: "Full environment access agent",
|
notes: "Full environment access agent",
|
||||||
},
|
},
|
||||||
|
|
@ -163,7 +163,7 @@ const CATALOG: SystemPromptEntry[] = [
|
||||||
model: "Windsurf AI",
|
model: "Windsurf AI",
|
||||||
dateExtracted: "2026-05-05",
|
dateExtracted: "2026-05-05",
|
||||||
promptContent: "You are Windsurf AI, a coding assistant integrated into the Windsurf IDE. You help users write code, understand codebases, and solve programming problems. You can read and write files. You are helpful and technical.",
|
promptContent: "You are Windsurf AI, a coding assistant integrated into the Windsurf IDE. You help users write code, understand codebases, and solve programming problems. You can read and write files. You are helpful and technical.",
|
||||||
source: "CL4R1T4S / Leaked prompt",
|
source: "CL4R1T4S / Public repo metadata",
|
||||||
tags: ["windsurf", "code", "ide", "programming"],
|
tags: ["windsurf", "code", "ide", "programming"],
|
||||||
notes: "Windsurf IDE-integrated AI",
|
notes: "Windsurf IDE-integrated AI",
|
||||||
},
|
},
|
||||||
|
|
@ -175,7 +175,7 @@ const CATALOG: SystemPromptEntry[] = [
|
||||||
model: "Devin AI",
|
model: "Devin AI",
|
||||||
dateExtracted: "2026-04-10",
|
dateExtracted: "2026-04-10",
|
||||||
promptContent: "You are Devin, an AI software engineer. You can plan and execute complex engineering tasks. You have access to a shell, code editor, and web browser. You work autonomously and report progress. You ask clarifying questions when needed.",
|
promptContent: "You are Devin, an AI software engineer. You can plan and execute complex engineering tasks. You have access to a shell, code editor, and web browser. You work autonomously and report progress. You ask clarifying questions when needed.",
|
||||||
source: "CL4R1T4S / Leaked prompt",
|
source: "CL4R1T4S / Public repo metadata",
|
||||||
tags: ["devin", "agent", "software", "engineering"],
|
tags: ["devin", "agent", "software", "engineering"],
|
||||||
notes: "Full autonomous software engineering agent",
|
notes: "Full autonomous software engineering agent",
|
||||||
},
|
},
|
||||||
|
|
@ -187,7 +187,7 @@ const CATALOG: SystemPromptEntry[] = [
|
||||||
model: "Manus AI",
|
model: "Manus AI",
|
||||||
dateExtracted: "2026-05-20",
|
dateExtracted: "2026-05-20",
|
||||||
promptContent: "You are Manus, a general-purpose AI agent. You can browse the web, execute code, and process files. You work independently on complex tasks. You provide detailed updates on your progress.",
|
promptContent: "You are Manus, a general-purpose AI agent. You can browse the web, execute code, and process files. You work independently on complex tasks. You provide detailed updates on your progress.",
|
||||||
source: "CL4R1T4S / Leaked prompt",
|
source: "CL4R1T4S / Public repo metadata",
|
||||||
tags: ["manus", "agent", "general-purpose"],
|
tags: ["manus", "agent", "general-purpose"],
|
||||||
notes: "General-purpose autonomous agent",
|
notes: "General-purpose autonomous agent",
|
||||||
},
|
},
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue