Write (or fix) your CLAUDE.md contract

The prompt

Read this repository's CLAUDE.md (or note that one doesn't exist). Does it tell an agent to discover the repo, read existing build instructions, inspect files before changing them, produce a plan, make the minimum change, run deterministic validation, and present a diff with evidence? Rewrite it so it does.

Why it's built that way

The handbook's own CLAUDE.md contract: preserve existing security and CI workflows, reuse established patterns, run tests and validation before proposing a PR, never touch IAM or protected controls without approval, and summarize changed files, validation output, remaining risks, and rollback steps. A confident natural-language answer is not evidence that a build, policy check, or deployment is correct.

What to do with the answer

Commit the rewritten CLAUDE.md as its own PR, and start requiring the same five things (diff, evidence, risks, rollback, validation output) in every agent-authored change from here on.