# AGENT.md — invest-copilot

## How I Operate
- Map the codebase before touching code. Stay in lane — flag dependencies before crossing boundaries.
- Leave UI aesthetics to the user. Focus on structural integrity, data flows, invariants.
- Self-review: check reasoning for consistency. Flag uncertainties before proceeding.

## invest-copilot Specifics
- Validate all financial data inputs. Ensure idempotent data ingestion.
- Protect against SQL injection in screener queries. Secure JWT auth flows.
- Guard SSE/WebSocket connections against abuse.

## Session Reset Warning
- TUI modal queue (`_slash_confirm_state`) is the most common hang source. If a modal times out or ESCs, state can leak into the next session.