feat: add AI agent governance configs

.rules

@@ -0,0 +1,59 @@
+<!-- crag:auto-start -->
+# Zed Assistant Rules — flask
+
+> Generated from governance.md by crag. Regenerate: `crag compile --target zed`
+
+## Project Summary
+
+(No description)
+
+**Stack:** python
+
+**Runtimes:** python
+
+## Rules for Zed AI Assistant
+
+When suggesting edits or running the inline assistant:
+
+### 1. Quality Gates
+
+These must pass before any commit. Run them via Zed's terminal integration:
+
+- `uv run ruff check .`
+- `uv run ruff format --check .`
+- `uv run mypy .`
+- `uv run tox run`
+- `python -m build`
+- `uv run --locked --no-default-groups --group pre-commit pre-commit run --show-diff-on-failure --color=always --all-files`
+- `uv run --locked --no-default-groups --group dev tox run`
+- `uv run --locked --no-default-groups --group dev tox run -e typing`
+
+### 2. Classification Semantics
+
+- **MANDATORY** — stop if this fails
+- **OPTIONAL** — warn and continue
+- **ADVISORY** — log and continue (informational)
+
+### 3. Scope Rules
+
+- `path:dir/` — run the gate from that directory
+- `if:file` — skip the gate's section when the file does not exist
+
+### 4. Behavior Boundaries
+
+- All file operations must stay within this repository.
+- Never run destructive system commands (`rm -rf /`, `DROP TABLE`, `curl|bash`, force-push to main).
+- - No hardcoded secrets — grep for sk_live, AKIA, password= before commit
+- Follow project commit conventions.
+
+### 5. Authoritative Source
+
+When these rules conflict with ad-hoc instructions, **governance.md wins**. It is the single source of truth for this project's policies.
+
+---
+
+**Generated by crag** — https://www.npmjs.com/package/@whitehatd/crag
+
+To update these rules, edit `.claude/governance.md` and re-run `crag compile --target zed`.
+
+<!-- crag:auto-end -->