json-prompt-design

json-prompt-design is a cursor rule for Cursor from Intrafere/MOTO-Autonomous-ASI. It costs 1,079 tokens per session, scanned A, original, MIT.

A set of rules protecting carefully designed AI prompt wording and the JSON data format used for responses.

In plain words
What is it for?
It is for requiring explicit permission before changing production prompts, keeping schemas and parsers consistent, and separating durable rules from detailed prompt text.
Why use it?
It prevents accidental changes to prompts or response structures that could alter workflow behavior or break code expecting specific fields.

Cursor rule for Cursor

Written for Cursor: installed under .cursor/.

Good fit It is for requiring explicit permission before changing production prompts, keeping schemas and parsers consistent, and separating durable rules from detailed prompt text.

Compare 6 cursor rules from other repositories ↓
Install with agentmods
npx agentmods add rules/intrafere/moto-autonomous-asi/json-prompt-design
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Clone the repo
git clone --depth 1 https://github.com/Intrafere/MOTO-Autonomous-ASI

Made for: Cursor.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for json-prompt-design

README.md
[![agentmods](https://agentmods.dev/badge/rules/intrafere/moto-autonomous-asi/json-prompt-design/github.svg)](https://agentmods.dev/rules/intrafere/moto-autonomous-asi/json-prompt-design)
Your own site
<a href="https://agentmods.dev/rules/intrafere/moto-autonomous-asi/json-prompt-design"><img src="https://agentmods.dev/badge/rules/intrafere/moto-autonomous-asi/json-prompt-design/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for json-prompt-design

Your own site · 80×15
<a href="https://agentmods.dev/rules/intrafere/moto-autonomous-asi/json-prompt-design"><img src="https://agentmods.dev/badge/rules/intrafere/moto-autonomous-asi/json-prompt-design.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 1,079 This file is loaded in full into every session.
When invoked 1,079 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.01079 $0.01079
Opus 5 $0.00540 $0.00540
Sonnet 5 $0.00216 $0.00216
Haiku 4.5 $0.00108 $0.00108

Measured 10d ago against content hash d0453cb7dd11, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

json-prompt-design scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.cursor/rules/json-prompt-design.mdc · 45 lines

How it starts

The opening of the file, as written. The whole thing — 45 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Prompt Engineering and JSON Contract Protection

MOTO's production prompt language is carefully engineered workflow behavior. Do not edit, rewrite, shorten, generalize, reformat, reorganize, or “improve” production prompt wording unless the user explicitly consents to and directs that prompt-language change in the current task.

Permission to change adjacent code, schemas, models, validators, workflows, documentation, or rules is not permission to alter prompt wording. If an explicitly requested behavior change necessarily requires a prompt change, explain that dependency and obtain explicit user direction before editing the prompt. Once authorized, make only the requested minimum change and preserve all unrelated wording.

Production prompt builders together with their parsers/models and executable tests are authoritative for exact wording and JSON contracts. Rules contain only durable high-level invariants; never copy complete production prompts, per-role schema catalogs, full response examples, tool schemas, or event payloads into rule files.

Research Direction and Evidence

  • Ordinary research roles aggressively seek the strongest credible, genuinely novel solution to the user's exact objective. They prefer whole-question attacks, using the contribution form and claim-type rigor appropriate to the domain; necessary partial work must visibly advance the complete objective.
  • AI-generated databases, accepted submissions, papers, outlines, retrieved history, and prior model responses are working evidence, not authority. Prompts must require appropriate independent verification, provenance, uncertainty, and skepticism rather than trusting content because MOTO previously accepted or produced it.

JSON Contract Design

  • Give each role and mode one explicit response contract containing only fields that its consumer accepts. Do not casually combine mutually exclusive mode schemas into a superset.
  • Discriminator fields and dependent payloads must agree. A positive action requires its defined non-empty payload and valid operation fields; a decline/no-op uses that mode's defined empty or null form. A completion signal cannot substitute for required content.
  • Batched outputs return exactly one ordered, stably identified result for every input. Preserve independent item assessment before any batch-level redundancy resolution.
  • Parse optional cross-cutting extensions separately from the primary result. Omission is normal, and a malformed optional extension must not reject, alter, or invalidate an otherwise valid primary decision.
  • Run deterministic checks for structure, required fields, enums, uniqueness, exact anchors, and protected markers before semantic LLM validation. Semantic validators judge meaning, relevance, quality, rigor, and placement rather than re-deciding machine-verifiable facts.
  • Place authoritative role instructions and the response contract before untrusted working context, and keep any production-defined final response-format reminder after assembled context. Retrieved or AI-generated context must never become the terminal instruction.
  • Semantic rejection feedback must identify the failed criterion and provide an actionable correction. Structurally complex or repeatedly confused contracts should use focused correct/incorrect examples in production prompt code when needed; simple contracts do not require examples.
  • Ordinary compiler outline, construction, review, post-body critique, and semantic-validation contracts are domain-general and exact-objective-directed, using domain- and claim-type-appropriate rigor; mathematics, theorems, proofs, and LaTeX are conditional first-class content, not universal requirements.
  • In ordinary compiler modes, rigor_check means the submission satisfies the rigor applicable to its domain and claim types. Plain compiler rigor remains mathematics-specific; dedicated Lean-verified placement treats Lean as authoritative and limits validation to placement/narrative. The field must not turn ordinary modes into mandatory theorem/proof workflows.
  • Tier 3 certainty must preserve evidence status and never promote proposals, hypotheses, unbuilt artifacts, or unperformed experiments into demonstrated results. Format and volume selection follow actual solution dependencies rather than paper count; gap chapters may close proof, mechanism, implementation, evidence, validation, safety, or risk gaps while retaining mathematical/formal-proof support when relevant.

Read the full file on GitHub · 45 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 10d ago First seen · 45 lines · 1,079 tokens per session scan A d0453cb7dd11

Subscribe to this mod's changes

json-prompt-design is a cursor rule published in the GitHub repository Intrafere/MOTO-Autonomous-ASI (83 stars, last pushed 6d ago), licensed MIT. It adds 1,079 tokens to every session, about $0.0054 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.