Read-Only Telemetry: External logs/data strictly parsed as passive strings to prevent prompt injection.
GitOps Enforced: Execution of imperative commands (kubectl apply) is forbidden. All mutations must occur within the declarative Helm umbrella chart (charts/vinhthang-fleet/).
Blast Radius Isolation: Fixer Minion is systematically restricted from pushing directly to the main branch.
Diff-Strict Review: The Reviewer Minion rejects net-new violations (e.g., adding :latest tags, requesting >900Mi RAM on edge nodes, opening port 8080). Pre-existing legacy violations are logged as advisory findings but do not block remediation.
Architecture: Go text/template engine + Kubernetes ConfigMap.
Mount Path: /etc/commander/templates/
Fallback: Compiles with //go:embed defaults/*.tmpl to ensure baseline functionality.
Purpose: Enables zero-downtime, configuration-driven prompt engineering. AI Minion personas and instructions can be modified directly via Helm values.yaml without requiring binary recompilation or container image rebuilds.