| Primitive | Use when | Trigger | Enforcement | Scope |
|---|---|---|---|---|
| Instructions Preferences |
Defaults everywhere Style, conventions, “be concise”, secure-by-default norms. |
Always‑on | Guidance | Repo / path / personal (stacks) |
| Prompt files Macros |
Named play Reusable on-demand template (“/release-notes”). |
Explicit invoke | Guidance | Repo |
| Agents / modes Roles |
Different permissions Planner vs implementer, read vs write, review mode. |
Explicit select | Capability boundary | Session (sometimes repo) |
| Skills Recipes |
Multi‑step workflow Runbooks with templates/scripts/assets. |
Relevant / invoked | Packaging | Repo or personal library |
| MCP Connector |
Tools/resources across boundary External systems, stable tool interfaces. |
Configured | Interface contract | Workspace/user config |
| Hooks / gates Enforcement |
Non‑negotiables Block dangerous actions, policy compliance. |
Event‑driven | Hard allow/deny | Repo / org |