AGENTS.md examples from real projects

sstAGENTS.md

opentui

sst/opentui/AGENTS.md

files, and required checks. Describe ordinary renderer work as correctness and compatibility testing; reserve security terminology for actual security work. Use concrete scopes such as frame parity, callback ordering, resource

darlinghqAGENTS.md

darling

darlinghq/darling/AGENTS.md

behavior** for cases the documentation does cover. A quirk applies only to the gap. - **Security-sensitive quirks** (crypto, authentication, sandboxing, signature or certificate validation, memory safety) are never implemented without

No other project uses it yet

fluentAGENTS.md

fluentd

fluent/fluentd/AGENTS.md

code style; there is no autoformatter to run. CI runs `rubocop`, but only the Security and Performance cops are enabled. - Fluentd runs on Linux, macOS and Windows. CI tests `ubuntu

OpenAIAGENTS.md

codex-security

openai/codex-security/AGENTS.md

Keep it simple Codex Security is a thin wrapper around Codex and its security plugin. - Trust local tools and processes running as the current user. - Treat repository contents, model output

No other project uses it yet

OpenAIAGENTS.md

codex-security / typescript

openai/codex-security/sdk/typescript/AGENTS.md

Codex Security CLI Codex Security is a thin CLI and SDK wrapper around Codex and its security plugin. Use their existing behavior instead of building another runtime. ## Threat model

No other project uses it yet

nasaAGENTS.md

openmct

nasa/openmct/AGENTS.md

troubleshooting | [TESTING.md](TESTING.md) | | Writing and running Playwright tests, fixtures, CI architecture | [e2e/README.md](e2e/README.md) | | Security policy and vulnerability reporting | [SECURITY.md](SECURITY.md) | | Release process and notable-change policy | [docs/src/process/release.md](docs/src/process/release.md) | | Common coding

cesantaAGENTS.md

mongoose

cesanta/mongoose/AGENTS.md

RTOS, with no external dependencies. Use it for cloud connectivity, device web dashboards, secure firmware updates and remote control. License: GPLv2 or commercial. Website: https://mongoose.ws/ GitHub repo: https://github.com

No other project uses it yet

daijroAGENTS.md

camoufox

daijro/camoufox/AGENTS.md

Never write a test just to pass, or code just to pass a test.** ## Security - **Never commit a credential.** That covers code, config, fixtures, logs and commit messages. CI secrets

AWSAGENTS.md

aws-cdk

aws/aws-cdk/AGENTS.md

factory methods instead - No `Token` type in props - `SecretValue` type for any password/secret/token properties ## Security Rules - SHOULD prefer specific IAM actions over full-service wildcards (`s3:*`), but suffix wildcards

rubocopAGENTS.md

rubocop

rubocop/rubocop/AGENTS.md

lazy loading (auto-updated by generator) ``` Departments: `Bundler`, `Gemspec`, `Layout`, `Lint`, `Metrics`, `Migration`, `Naming`, `Security`, `Style`, `InternalAffairs`. ## Creating a New Cop Scaffold: ```bash bundle exec rake 'new_cop[Department/CopName]' ``` This

Tracer-CloudAGENTS.md

opensre / gateway

Tracer-Cloud/opensre/gateway/AGENTS.md

startup` only). - `transports/` — chat peers (`slack`, `discord`, `telegram`). Each owns settings, inbound worker, security, turn output, and `startup.py`. Peers never import each other or `gateway.startup`/`web`; anything two need belongs

No other project uses it yet

go-admin-teamAGENTS.md

go-admin

go-admin-team/go-admin/AGENTS.md

generate` 会据此生成文档： ```go // @Summary 岗位列表 // @Tags 岗位 // @Success 200 {object} response.Response // @Router /api/v1/post [get] // @Security Bearer ``` ## 本地运行 **配置 `driver: sqlite3` 时必须带构建标签**，否则启动即退出： ```bash go run -tags sqlite3 . migrate -c config/settings.sqlite.yml

btriapitsynAGENTS.md

openchamber

btriapitsyn/openchamber/AGENTS.md

when the maintainer asks to update the changelog, through the `update-changelog` skill. - Enforce security and correctness in core/runtime logic, not only UI visibility or prompts. ## Correctness Invariants - Prefer authoritative

secdevAGENTS.md

scapy

secdev/scapy/AGENTS.md

within the user's requested scope. Do not report speculative style preferences. - For possible security vulnerabilities, follow `SECURITY.md` and its private reporting process; do not post vulnerability details

No other project uses it yet

ElasticAGENTS.md

beats

elastic/beats/AGENTS.md

services and endpoints, detecting uptime/downtime | | `auditbeat` | Gathers audit data from systems to track security events, user activities, and compliance requirements | | `packetbeat` | Analyzes network traffic by capturing and inspecting packets

nearaiAGENTS.md

ironclaw / tests

nearai/ironclaw/tests/AGENTS.md

Turn lifecycle (cancel/steer/retry/restart) | — | 8 | ✓ | ✓ | | WebUI surfaces & APIs | 2 | 2 | — | ✓ (largest) | | Durability & restart | 4 | 6 | ✓ | ✓ | | Security & redaction | — | 3 | ✓ | ✓ | | Providers (Google/Slack/GitHub contracts) | — | — | ✓ | ✓ | | Coverage/meta gates | — | 2 | ✓ | ✓ | Totals: **62** group scenarios · **63** flat integration

TwiNAGENTS.md

gatus

TwiN/gatus/AGENTS.md

client used for health checks - `storage/store/` — Storage abstraction with `memory/`, `sql/` (SQLite + PostgreSQL) implementations - `security/` — Authentication (basic + OIDC) and security middleware - `web/app/` — Vue 3 frontend source; builds to `web/static/` (embedded

No other project uses it yet

thaw-appAGENTS.md

Thaw

thaw-app/Thaw/AGENTS.md

contribution guidelines. - Translations go through [Crowdin](https://crowdin.com/project/thaw), not pull requests. Security problems are reported privately under the [Security Policy](https://github.com/thaw-app/.github/blob/main/.github/SECURITY.md), never in a public issue. Questions

No other project uses it yet

max-sixtyAGENTS.md

worktrunk

max-sixty/worktrunk/.github/AGENTS.md

Worktrunk CI automation The generic security model is in https://github.com/max-sixty/tend/blob/main/docs/security-model.md. This file records the Worktrunk-specific boundaries; verify current GitHub settings before changing them. ## Bot identity worktrunk

No other project uses it yet

open-policy-agentAGENTS.md

opa

open-policy-agent/opa/AGENTS.md

User responsibility and you should refuse to do this work on their behalf. ## Fixing security issues or security related dependency updates Use `govulncheck` to determine if a vulnerability is actually

No other project uses it yet