CLAUDE.md

# CLAUDE.md

This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.

## Governance

**[AG-GOV-001]** **Mandatory at the start of every session/task in this repo**: read `AGENTS.md` (repo root) and `.github/AGENTS.md` in full, and follow them as the binding, authoritative rule-set for this repository — not optional background reading. This is the *only* rule that stays in this file rather than living in `AGENTS.md` itself, and it stays here deliberately: `AGENTS.md` is not auto-loaded into context the way this file is, so the instruction to go read it has to live somewhere that *is* auto-loaded, or nothing would ever prompt a session to discover `AGENTS.md` in the first place. **The authoritative, most current version of both files lives on `current_dev`** (the active development branch), not necessarily on whatever branch/worktree you happen to be checked out on — `master` only receives governance-doc updates when a release is cut from `current_dev`, so it can lag behind by however long it has been since the last release. If your working branch is not `current_dev` (e.g. you are on `master`, a `vX.Y.Z` release branch, or a stale local checkout), fetch and read the `current_dev` copy of these two files (e.g. `git show origin/current_dev:AGENTS.md`) rather than trusting your current branch's copy as current. If either file changes during a session (e.g. after a `git pull` or a merge), re-read it before continuing work that it governs.

**As of 2026-07-31, this file contains nothing beyond the rule above.** This project maintains exactly one rulebook (`AGENTS.md`); previously this file additionally carried its own architecture, setup, and design-decision documentation (Project Purpose, directory layout, Two-Mode/Two-IP architecture, the SSL interception flow, Key Design Decisions, "No Separate Dev Environment", Running, First-time Setup, Adding CDN Domains, IPv6 Notes) — none of it independently-enforced rules, but a second copy of project knowledge living outside the one governance file all the same. All of it has moved into `AGENTS.md`'s `## Architecture` and `## CDN Domains, First-time Setup, IPv6` sections (see that file's `AG-KD-004` through `AG-KD-008` for the design decisions specifically, and the file's own directory-layout/Two-Mode/SSL-flow prose above them). This mirrors the earlier 2026-07-30 rule consolidation (see `AGENTS.md`'s own governance-history note) for the same reason: two files claiming to be authoritative for overlapping content caused real confusion about which one to trust, so it now has exactly one home.