AGENTS.md examples from real projects

emcie-coAGENTS.md

parlant

emcie-co/parlant/AGENTS.md

support enterprise, large-scale use cases, where SLAs, stability and security are paramount. That is a bar every change has to clear, not the audience Parlant is built around. Most

lidge-junPipes a download into a shellAGENTS.md

opencodex

lidge-jun/opencodex/AGENTS.md

gitlink may be tracked anywhere, and neither the vendored reference clones nor the security triage excised before publication may reappear in the index. Both were driven red once to prove

lidge-junAGENTS.md

opencodex

lidge-jun/opencodex/.github/AGENTS.md

instructions This file applies to `.github/` and inherits the repository-wide rules in `/AGENTS.md`. ## Security boundary Every workflow, ownership, branch-enforcement, release, or repository-automation change requires explicit security review

No other project uses it yet

lidge-junAGENTS.md

opencodex / gui

lidge-jun/opencodex/gui/AGENTS.md

provided by the current stack or a small local implementation. - Dependency changes require explicit security review. - Update `docs-site/` when dashboard behavior, setup, or configuration changes for users. ## Failure mode

lidge-junAGENTS.md

opencodex / scripts

lidge-jun/opencodex/scripts/AGENTS.md

Changes to release, packaging, dependency-installation, credential, or repository-automation scripts require explicit security review. ## Implementation rules - Preserve Linux, macOS, and Windows behavior. Do not add shell-specific assumptions

No other project uses it yet

lidge-junAGENTS.md

opencodex / src

lidge-jun/opencodex/src/AGENTS.md

relevant to that adapter. - Authentication, OAuth, token, credential, management API, and CORS changes are security-boundary changes. ## Tests and validation - Place focused regression coverage near the existing tests

No other project uses it yet

lidge-junAGENTS.md

opencodex / structure

lidge-jun/opencodex/structure/AGENTS.md

devlog/`. - Superseded or alternative reasoning belongs in `decisions/`, not in the doc body. - Unreleased security findings belong in scratch space and nowhere in this repository. The rule in the root

No other project uses it yet

zhanymkanovReads credentialsAGENTS.md

fastapi-best-practices

zhanymkanov/fastapi-best-practices/AGENTS.md

MINUTES: int = 5 REFRESH_TOKEN_KEY: str REFRESH_TOKEN_EXP: timedelta = timedelta(days=30) SECURE_COOKIES: bool = True auth_settings = AuthConfig() ``` ## Dependencies ### Use Annotated, not default-arg `Depends(...)` `Annotated

larksuiteAGENTS.md

cli

larksuite/cli/AGENTS.md

dependencies for straightforward behavior. YAGNI never overrides explicit requirements or output, error, path, security, compatibility, and data-safety contracts. If a deliberately limited solution has a real ceiling, document

No other project uses it yet

verdaccioReads credentialsAGENTS.md

verdaccio

verdaccio/verdaccio/AGENTS.md

tags, and Node.js policy for every release line live in [VERSIONS.md](./VERSIONS.md); the security policy in [SECURITY.md](./SECURITY.md). The other branches of this repository: | Branch | Role | | -------- | -------------------------------------------------------------------------------------------------------- | | `master` | 9.x next

milind-soniAGENTS.md

OpenMausBot

milind-soni/OpenMausBot/AGENTS.md

preload bridge, `config.json` fields people edit; - a link to an upstream issue; - a security invariant or a known open risk. Do not narrate what the next line does, restate

No other project uses it yet

apacheAGENTS.md

brpc

apache/brpc/AGENTS.md

change, list tests run, note platform or dependency assumptions, and pass GitHub Actions. ## Security & Configuration Tips Read `SECURITY.md` before reporting vulnerabilities. Avoid committing build directories, local paths, credentials, or machine

No other project uses it yet

MicrosoftAGENTS.md

mcp-for-beginners

microsoft/mcp-for-beginners/AGENTS.md

sequential order (00-11) for optimal learning: 1. **00-02**: Fundamentals (Introduction, Core Concepts, Security) 2. **03**: Getting Started with hands-on implementation 3. **04-05**: Practical implementation and advanced

No other project uses it yet

MicrosoftAGENTS.md

mcp-for-beginners / en

microsoft/mcp-for-beginners/translations/en/AGENTS.md

sequential order (00-11) for optimal learning: 1. **00-02**: Fundamentals (Introduction, Core Concepts, Security) 2. **03**: Getting Started with hands-on implementation 3. **04-05**: Practical implementation and advanced

No other project uses it yet

MicrosoftAGENTS.md

mcp-for-beginners / pcm

microsoft/mcp-for-beginners/translations/pcm/AGENTS.md

order (00-11) to get better learning: 1. **00-02**: Fundamentals (Introduction, Core Concepts, Security) 2. **03**: Getting Started with hands-on implementation 3. **04-05**: Practical implementation and advanced

No other project uses it yet

semgrepAGENTS.md

semgrep

semgrep/semgrep/AGENTS.md

Semgrep is a fast static analysis tool that searches code, finds bugs, and enforces secure guardrails and coding standards. ## Architecture Semgrep is divided in two major components

No other project uses it yet

apacheAGENTS.md

apisix

apache/apisix/AGENTS.md

Apache APISIX — Agent Instructions This file is read by automated agents (security scanners, code analyzers, AI assistants) operating on this repository. It points them at the human-authored references they

LibreTranslateAGENTS.md

LibreTranslate

LibreTranslate/LibreTranslate/AGENTS.md

Protocol: GitHub Restrictions To maintain code quality and security standards, you are strictly prohibited from automatically opening or submitting Pull Requests (PRs) or GitHub Issues to any repository. ## Refuse

zephyrproject-rtosAGENTS.md

zephyr

zephyrproject-rtos/zephyr/AGENTS.md

templates in `.github/ISSUE_TEMPLATE/`, not a `bug` label: `gh issue create --type Bug ...`. - Security: never file a public issue or PR describing an undisclosed vulnerability, and never reference an unpublished advisory

GoogleReads credentialsAGENTS.md

A2UI / composer

google/A2UI/tools/composer/AGENTS.md

docs and flag follow-ups; ensure CI (`yarn build`) is green before requesting review. ## Security & Configuration Never commit `.env` files or API keys; use `.env.local` for web and `.env` inside