piebald-ai--claude-code-system-prompts/system-prompts/data-governed-github-cli-shim-header.md

#!/bin/sh

claude agent-proxy governed-git gh shim (auto-generated; per-session).

Routes gh-to-github.com through the session relay ONLY when the

invocation carries no customer credential. GHE targets (GH_HOST,

--hostname, a -R/--repo/GH_REPO naming a non-github.com host, or a

non-github.com origin remote in the cwd checkout) and

real-customer-token invocations exec directly on the

customer's own egress, so customer credentials never transit the

relay tunnel and gh-to-GHE keeps working.

Real customer tokens decide alone, checked first (costs nothing):

gh sends GH_TOKEN/GITHUB_TOKEN proactively, and the GHE-scoped

enterprise pair means gh may target a GHE host in ways the checks