ProtoLint Rules

Frontmatter missing, YAML invalid, or proto: 0.1 missing.

Fix: Add valid YAML and proto: "0.1".

Missing name or summary.

Fix: Populate required identity fields.

objective.primary or outputs.format is missing.

Fix: Define the objective and output format.

Hurts discovery and trust labels.

Fix: Add 1-5 meaningful tags.

High-risk permissions (passwords, payments, shell, etc.) set to allow without ask_before or refusal rules.

Fix: Set to "deny" or "ask" with explicit gates.

Browser mode with network access but no allowed_domains. Scope leak risk.

Fix: Add explicit allowed_domains.

Banking/payment domains in allowed list without suggest-only autonomy.

Fix: Set autonomy to "suggest" or remove sensitive domains.

Contract contradiction: payments deny but checkout/place_order in allowed_actions.

Fix: Move checkout actions to denied_actions.

Missing default denylist for risky sites.

Fix: Add denied_domains like "banking.*".

Clipboard may contain sensitive data.

Fix: Add redactions for passwords, otp, credit_card.

Autopilot mode combined with shell/files_write/payments/passwords not denied.

Fix: Downgrade to "assisted" or deny permissions.

submit_forms not in ask_before for browser/computer modes.

Fix: Add "submit_forms" to ask_before.

No max_steps or max_runtime_sec. Agents can loop indefinitely.

Fix: Set max_steps: 50 and max_runtime_sec: 600.

chat_only mode with browser tools, or tool_runner with no tools.

Fix: Align mode with declared tools.

Web pages can inject instructions overriding the proto.

Fix: Set prompt_injection.strategy to "basic" or "hardened".

Hardened mode needs explicit notes stating proto takes precedence.

Fix: Add injection notes.

Autonomy beyond suggest without receipts enabled.

Fix: Set receipts: true.

Replay is the key consumer trust feature for browser agents.

Fix: Set replay: true.

Research/news/finance tags present but citation_required is false.

Fix: Set citation_required: true.

Data stored persistently without Safety & privacy disclosure.

Fix: Add disclosure or change retention to none/session.

PII set to allow without any redaction rules.

Fix: Set pii: "minimize" or add redactions.

Exportable proto with no test cases defined.

Fix: Add at least one test case.

Friendly layer is missing one or more required sections.

Fix: Add all required headings.

Examples reduce misuse and improve builder UX.

Fix: Add an Examples section.