# T17 — The next twenty rules, from the rows that need them most

> Rendered from .claude/briefs/T17-the-next-twenty-rules.md in the repository. The text below is that file.
> Source: https://riskmandate.ai/admin/work/T17/ · noindex · written by scripts/site/build-admin.mjs

**From:** `docs/briefs/direction__one-rule-a-stranger-can-paste-is-the-way-in.md` §4.3 · **Size:** half a day per five
**Status:** done, v1.37.0 (8 October 2026)

## Why

The memo asks for dozens, then hundreds, as a rule base. The candidates are already written down:
every published grant row whose barrier is *none* and whose undo class is irreversible is a capability
an agent holds with nothing in the way and no way back. Those are the questions a stranger most wants
asked.

## What to build

- **A candidate list**, generated by `build-rules.mjs --candidates`: every row across the sixteen
  vaults with barrier `none` and an irreversible undo class, grouped by capability, with the shapes
  that carry it and whether a rule exists.
- **Twenty rules from it**, Claude shapes first (`claude-code-cli`, `claude-code-web`,
  `claude-desktop`, `claude-web-connectors`), then ChatGPT and the mail and file connectors if the lead
  says so. Each one a JSON file per T15's schema, status `drafted`.
- **The question written as a person would ask it**, not as the capability id: *Do you want Claude to
  send email from your account?*, not *send.message.world*.

## Rules

- One rule per question. Two shapes share a rule when the question is the same; the `shapes` list
  carries both, each with its own barrier.
- A stronger barrier is named only with a source and a date. Otherwise *none known*.
- The rule's answer, *never* or *ask first*, is a default the page proposes; the paragraph says when
  the other one is right.

## Done when

Twenty-four rules are live, the candidate list is on the console, and the index shows how many
candidates have no rule yet.