Allowlisted files

Only operational docs and config. DB files, credentials, and private config are never shown.

OPERATING_RULES.md

# OPERATING_RULES.md

- Ask before destructive commands.
- Never expose secrets.
- Treat OpenClaw / Fakker as the main orchestration system.
- Keep orchestration state inside the OpenClaw workspace only.
- Paperclip is not a core project right now; do not build around it.
- Treat Paperclip as protected: do not modify /root/paperclip or paperclip-* containers unless Khaled explicitly says Paperclip.
- Paperclip may be removed or reformatted later, so do not depend on it for orchestration state.
- Prefer dry-run or status commands first.
- Use short answers by default.
- Summarize changes after every task.