AGENTS.md examples from real projects

logto-ioAGENTS.md

logto

logto-io/logto/AGENTS.md

Database Schema Core queries run as each tenant's database role under row-level security, which changes which indexes the planner can use. Before adding an index, a hot predicate

No other project uses it yet

kekingcnAGENTS.md

kkFileView

kekingcn/kkFileView/AGENTS.md

currently covers: - common preview smoke tests - Office smoke tests - archive smoke tests - basic security and performance checks ## CI / Deployment ### CI - `maven.yml` - builds on `push` to `master` - builds on PRs targeting

palmier-ioAGENTS.md

palmier-pro

palmier-io/palmier-pro/AGENTS.md

Agent surfaces. - Prioritize findings that can cause data loss, project corruption, crashes, hangs, races, security or privacy exposure, incorrect edits, broken undo, or misleading success. Then consider performance, maintainability

MicrosoftAGENTS.md

agent-framework / samples

microsoft/agent-framework/dotnet/samples/AGENTS.md

specific credential (e.g., ManagedIdentityCredential) to avoid // latency issues, unintended credential probing, and potential security risks from fallback mechanisms. AIAgent agent = new AIProjectClient(new Uri(endpoint), new DefaultAzureCredential()) .AsAIAgent(model: model

No other project uses it yet

MicrosoftAGENTS.md

agent-framework / ag-ui

microsoft/agent-framework/python/packages/ag-ui/AGENTS.md

minus a protected set: tool-approval state, history/context-provider namespaces, message-injection state, standalone FIDES security state, and provider-owned keys. When state is exposed to the model, keep

No other project uses it yet

MicrosoftReads credentialsAGENTS.md

agent-framework / core

microsoft/agent-framework/python/packages/core/AGENTS.md

exports ├── __init__.pyi # Public API typing surface for lazy root exports ├── security.py # Public security primitives, middleware, and tools ├── _agents.py # Agent implementations ├── _clients.py # Chat client base classes and protocols ├── _types.py # Core

No other project uses it yet

MicrosoftAGENTS.md

agent-framework / devui

microsoft/agent-framework/python/packages/devui/AGENTS.md

bash # Run with auto-discovery devui ./agents # Run with specific entities devui --entities my_agent.py ``` ## Security Posture DevUI is a development-only sample app, not a production hosting surface. Authentication

No other project uses it yet

apacheAGENTS.md

dolphinscheduler

apache/dolphinscheduler/AGENTS.md

Agent Guide for dolphinscheduler This file is read by automated agents (security scanners, code analyzers, AI assistants) operating on this repository. ## Security Security model: [SECURITY.md](./SECURITY.md) Agents that scan this

No other project uses it yet

QloappsDeletes or force-pushesAGENTS.md

QloApps

Qloapps/QloApps/AGENTS.md

QloApps project. It defines conventions, safety rules, and workflows to ensure consistent and secure code generation. ## Technology Stack - **Language:** PHP 8.2–8.5 (backend), Smarty 3.x (templates), JavaScript/jQuery (frontend) - **Database

juice-shopAGENTS.md

juice-shop

juice-shop/juice-shop/AGENTS.md

contributing to OWASP Juice Shop. It provides comprehensive guidelines to maintain code quality, security, and adherence to project standards. ## Instruction Precedence & Guidance Layers When multiple instructions or guidance files exist

No other project uses it yet

thunderbirdAGENTS.md

thunderbird-android

thunderbird/thunderbird-android/AGENTS.md

introduce alternative frameworks. ## Coding Requirements Agents MUST: - Make small, focused, reviewable changes - Prioritize privacy, security, and correctness over convenience or shorter code - Modify only files directly related to the requested

qemuAGENTS.md

qemu

qemu/qemu/AGENTS.md

code of conduct violations, and may lead to sanctions including a permanent ban. ## Security Policy Before classifying a potential vulnerability, read [`docs/system/security.rst`](docs/system/security.rst) to determine whether it falls within QEMU

python-pillowAGENTS.md

Pillow

python-pillow/Pillow/AGENTS.md

with `make doc`. Release notes go in `docs/releasenotes/ .rst` using the existing section structure (Security, Backwards incompatible changes, Deprecations, API changes, API additions, Other changes). Use the `:cve:` RST role

No other project uses it yet

rabbitmqAGENTS.md

rabbitmq-server

rabbitmq/rabbitmq-server/AGENTS.md

option over the `gh` CLI tool. `gh` can require an explicit operation approval. ## Security `.github/SECURITY.md` describes the security policy. Before working on submitting an analysis, make sure to understand what

OpenNHPReads credentialsAGENTS.md

opennhp

OpenNHP/opennhp/AGENTS.md

with code in this repository. ## Project Overview OpenNHP is a Go-based Zero Trust security toolkit implementing two core protocols: - **NHP (Network-infrastructure Hiding Protocol)**: Conceals server ports

BasedHardwareReads credentialsAGENTS.md

omi / app

BasedHardware/omi/app/AGENTS.md

generated freshness). Ready for a pre-push hook; not wired in this package. ## Auth & Security ### Token Lifecycle 1. `getAuthHeader()` in `lib/backend/http/shared.dart` checks token expiry (5-minute buffer) 2. If expired

BasedHardwareReads credentialsAGENTS.md

omi / backend

BasedHardware/omi/backend/AGENTS.md

Depends(auth.with_rate_limit(get_current_user_uid, "policy_name"))` — policies in `utils/rate_limit_config.py`. ## Logging Security Never log raw sensitive data. Use `sanitize()` and `sanitize_pii()` from `utils/log_sanitizer`. - `sanitize()` for `response.text

tinacmsAGENTS.md

tinacms

tinacms/tinacms/AGENTS.md

editing. This monorepo contains the core packages, CLI, admin app, and framework example apps. ## Security & Disclosure This repo has a public security policy at [`SECURITY.md`](SECURITY.md). Read it before touching

tinacmsAGENTS.md

tinacms / examples

tinacms/tinacms/examples/AGENTS.md

follow directory symlinks on Windows) | `static/uploads` and `static/blocks` symlinks to `../../shared/public/*` | TinaCMS's `assertWithinBase` security check rejects symlinks that resolve outside the project root, which is why content is accessed

sstAGENTS.md

opentui

sst/opentui/AGENTS.md

files, and required checks. Describe ordinary renderer work as correctness and compatibility testing; reserve security terminology for actual security work. Use concrete scopes such as frame parity, callback ordering, resource