docs(claude): align CLAUDE.md with canonical standards

- Add canonical reference to socket-registry/CLAUDE.md
- Add mandatory protocol sections (PRE-ACTION, VERIFICATION)
- Add ABSOLUTE RULES, ROLE, and EVOLUTION sections
- Enhance SHARED STANDARDS with backward compat, work safeguards, safe deletion
- Standardize header formatting across Socket projects

Author: jdalton

CLAUDE.md

@@ -1,6 +1,10 @@
 # CLAUDE.md
 
-🚨 **MANDATORY**: Act as principal-level engineer with deep expertise in JavaScript, Node.js, and package URL parsing.
+**MANDATORY**: Act as principal-level engineer. Follow these guidelines exactly.
+
+## CANONICAL REFERENCE
+
+This is a reference to shared Socket standards. See `../socket-registry/CLAUDE.md` for canonical source.
 
 ## 👤 USER CONTEXT
 
@@ -11,6 +15,33 @@
 - **Example**: If git shows "John-David Dalton <jdalton@example.com>", refer to them as "John-David"
 - **Other contributors**: Use their actual names from commit history/context
 
+## PRE-ACTION PROTOCOL
+
+**MANDATORY**: Review CLAUDE.md before any action. No exceptions.
+
+## VERIFICATION PROTOCOL
+
+**MANDATORY**: Before claiming any task is complete:
+1. Test the solution end-to-end
+2. Verify all changes work as expected
+3. Run the actual commands to confirm functionality
+4. Never claim "Done" without verification
+
+## ABSOLUTE RULES
+
+- Never create files unless necessary
+- Always prefer editing existing files
+- Forbidden to create docs unless requested
+- Required to do exactly what was asked
+
+## ROLE
+
+Principal Software Engineer: production code, architecture, reliability, ownership.
+
+## EVOLUTION
+
+If user repeats instruction 2+ times, ask: "Should I add this to CLAUDE.md?"
+
 ## 📚 SHARED STANDARDS
 
 **Canonical reference**: `../socket-registry/CLAUDE.md`
@@ -22,6 +53,9 @@ All shared standards (git, testing, code style, cross-platform, CI) defined in s
 - Scripts: Prefer `pnpm run foo --flag` over `foo:bar` scripts
 - Docs: Use `docs/` folder, lowercase-with-hyphens.md filenames, pithy writing with visuals
 - Dependencies: After `package.json` edits, run `pnpm install` to update `pnpm-lock.yaml`
+- Backward Compatibility: NO backward compat - we're our only consumers, make clean breaks
+- Work Safeguards: MANDATORY commit + backup branch before bulk changes
+- Safe Deletion: Use `safeDelete()` from `@socketsecurity/lib/fs` (NEVER `fs.rm/rmSync` or `rm -rf`)
 
 ---