# Repository Instructions

- When using Ghidra MCP tools in this repository, do not run destructive actions unless the user explicitly asks for them.
- Treat these actions as destructive and forbidden by default during analysis: deleting functions, deleting data, patching bytes, applying edit plans that remove or overwrite program structures, or any other write operation that changes binary semantics.
- During analysis, allowed write actions are limited to renaming functions or data and adding comments.
- Prefer read-only inspection first. If a write action seems necessary beyond renames/comments, stop and ask the user before proceeding.