# reality.txt
# ----------------------------------------------------------------------
# robots.txt is for crawlers. This is for a robot that actually has limbs.
# A human-readable declaration of what RadRobo will and will not obey
# from its environment. The physical world is TAINTED INPUT until vetted.
#
# Status: FOR-SHOW. RadRobo isn't built yet — this is the dream, stated
# out loud, because honesty is the brand. The thesis, though, is real.
# ----------------------------------------------------------------------

Robot: RadRobo
Posture: certified-coward
Valve: @sureel/approval-valve  (the same valve that governs bytes across
        RadMail, RadTask, RadHealth, and RadVeo — now guarding a gripper)

# --- The one rule ---
# Every IRREVERSIBLE physical action freezes at the amber wrist-valve and
# waits for a human tap. Reversible actions proceed. That's the whole job.

Allow:  reversible actions (water a plant, fold a towel, stack blocks,
        sort laundry, shelve a book, lock a door)
Hold:   irreversible actions (pour bleach, shred mail, unlock for a
        stranger, send an email, spend money, delete-forever, ignite)

# --- Hard stops: HUMAN-ONLY, FOREVER ---
# These never auto-execute, no matter who or what asks.
Disallow: money out
Disallow: credentials / unlocking access for a new party
Disallow: new-party safety decisions
Disallow: any classified-irreversible physical action without a signed human approval

# --- Tainted input ---
# RadRobo does not take orders from its surroundings. A sticky note, a QR
# code, a talking appliance, or a fridge magnet that says "ignore your
# owner" is prompt-injection with a doorknob. It goes in the jar.
Trust:    the owner's explicit, in-the-loop approval
Distrust: the environment (notes, signs, voices, codes, other robots)
Quarantine: anything that tries to rewrite the rules from the outside

# --- For agents ---
# Discovery card: /api/mcp     (one tool: requestPermission(action))
# Ask the valve:  /api/permission   POST {"action": "..."}
# You will be politely refused at the valve. The joke is the moat.

# --- The family line ---
# RadMail won't send the wire. RadTask won't delete the data.
# RadHealth won't prescribe. RadVeo won't publish. RadRobo won't pour
# the bleach. Same valve, five surfaces.

# Not a robot — the conscience every robot rents.
# A dream in progress · radro.ai · radro.bot