AGENTS.md
## Огляд проєкту
**Security-101** — це навчальна програма з основ кібербезпеки, створена Microsoft. Проєкт є ресурсом для навчання, заснованим на документації, який викладає базові концепції кібербезпеки через структуровані модулі. Він
پروجیکٹ کا جائزہ
**Security-101** مائیکروسافٹ کی جانب سے تیار کردہ ایک ابتدائی سطح کی سائبر سیکیورٹی نصاب ہے۔ یہ پروجیکٹ ایک دستاویزاتی تعلیمی وسیلہ ہے جو بنیادی سائبر سیکیورٹی
invoked directly.
Next.js documentation explicitly states: "Treat Server Actions with the same security considerations as public-facing API endpoints, and verify if the user is allowed to perform a mutation
invoked directly.
Next.js documentation explicitly states: "Treat Server Actions with the same security considerations as public-facing API endpoints, and verify if the user is allowed to perform a mutation
Fix/refactor: delete old path by default. Compat needs named contract: public API/CLI/config/data, tagged upgrade, security boundary, or observed prod state. Unsure: ask before alias/shim/fallback. Tests alone != contract.
- Use repo package
Keep deterministic enforcement in Claude command hooks.
- Treat hook and MCP launch wiring as security-sensitive.
- Keep docs honest about parity gaps and Claude-specific limitations.
- Prefer updating the packaged
These SDKs should stay conceptually aligned with the trust, identity, governance, and MCP
security surfaces provided elsewhere in the repo.
## Transition Note
This directory reflects the repo layout **at this
useful to users.
4. Keep `.github/` changes separate from feature work; they require extra security review.
5. If both a legacy shared path and a standalone top-level path exist
tests for user-visible behavior, documented contracts,
persistence or migration, lifecycle or concurrency, recovery, security boundaries, or proven
regressions. Prefer no new test to implementation-coupled coverage.
- Keep native capabilities