# Working rules

## No upstream pull requests

Do not open pull requests, merge requests, or send patches to any
upstream repository, for any project. This includes `knotless` and
`socialweb-computer-kcp`. Do not ask an upstream maintainer to merge our
changes.

All work stays in this repository and in our own forks.

## Forks

Patch targets are local forks, never the original checkouts:

- `~/src/knotless-fork`: `upstream` is
  `https://knotless.dev/chadtmiller.com/knotless`, `fork` is
  `knotless://johnandersen777.bsky.social/knotless`.
- `~/src/socialweb-computer-kcp-fork`: `upstream` is
  `https://github.com/publicdomainrelay/socialweb-computer-kcp`, `fork`
  is `knotless://johnandersen777.bsky.social/socialweb-computer-kcp`.

`upstream` is read-only. Fetch from it when a rebase needs current code,
never push to it. Push to `fork` as work lands, in small commits; push
this repository to its own `knotless://` remote the same way.

The original checkouts in `~/src/knotless` and
`~/src/socialweb-computer-kcp` are read-only references for comparison.

## Credentials

Never print, log, commit, or copy the values in
`~/.aliceoa_bsky_social_source`, `~/.bobvmbuilder_bsky_social_source`,
knotless session files, or gateway session cookies. Let
`scripts/oauth-signin.ts` read the credential file itself.