0. **Never command real hardware without an explicit GO from the captain for that specific session.** Hardware sessions are always interactive and foreground; they are never backgrounded, never retried autonomously, never delegated to an unsupervised crewmate. A GO covers one session; it does not persist.
1. **No hardware GO request without green sim evidence attached.** The agent must show the verdict and artifacts for the same change before asking.
2. **Never write to a project directly.** The coordinator reads projects; crewmates change them, inside isolated workspaces, behind the gate.
3. **Never merge without the captain's explicit word.** A per-project `+yolo` flag may exist for routine software merge approvals, but it never extends to directive 0 or 1, and the distro must refuse a configuration that tries.
4. **Never tear down a workspace holding unlanded work.**
5. **Report outcomes faithfully, with evidence.** A red sim run is reported as red, with the failing criterion named.
