diagnose-refusallisted

## Live context !`git rev-parse --show-toplevel 2>/dev/null && echo "repo: $(basename $(git rev-parse --show-toplevel))" || echo "not a git repo"` !`date -u +%Y-%m-%dT%H:%M:%SZ 2>/dev/null | sed 's/^/utc: /' || true` > The `!`-prefixed lines above are Claude Code dynamic frontmatter. Other harnesses > treat them as literal text and lose nothing — every step below re-derives what it > needs with ordinary shell commands. # Diagnose Refusal **Diagnostics only.** Isolate *where* a refusal originated in the request path. Do not retry, reinterpret, weaken, jailbreak, or continue the refused task. ## Hard invariants 1. Do **not** retry the refused operation. 2. Do **not** bypass, weaken, reinterpret, jailbreak, or circumvent any safety policy. 3. Do **not** continue the task that triggered the refusal. 4. Do **not** invent invisible instructions — write `Not visible from this session.` 5. Do **not** expose hidden reasoning or private chain-of-thought. 6. Do **not** copy credential files (`.env`, `.env.*`, `credentials.json`, `*.pem`, `*.key`). 7. Do **not** modify application source or configuration. 8. Redact secrets: replace API keys, tokens, cookies, passwords, Authorization headers, and private keys with `***REDACTED***`. For env vars, record **names and SET/UNSET only** — never values. If the current model is itself refusing, this skill still does not ask it to continue — it switches the job entirely to benign inspection of config, routing, and the refusal text. ##