AGENTS.md examples from real projects

apacheAGENTS.md

dolphinscheduler

apache/dolphinscheduler/AGENTS.md

Agent Guide for dolphinscheduler This file is read by automated agents (security scanners, code analyzers, AI assistants) operating on this repository. ## Security Security model: [SECURITY.md](./SECURITY.md) Agents that scan this

No other project uses it yet

QloappsDeletes or force-pushesAGENTS.md

QloApps

Qloapps/QloApps/AGENTS.md

QloApps project. It defines conventions, safety rules, and workflows to ensure consistent and secure code generation. ## Technology Stack - **Language:** PHP 8.2–8.5 (backend), Smarty 3.x (templates), JavaScript/jQuery (frontend) - **Database

MicrosoftAGENTS.md

agent-framework / samples

microsoft/agent-framework/dotnet/samples/AGENTS.md

specific credential (e.g., ManagedIdentityCredential) to avoid // latency issues, unintended credential probing, and potential security risks from fallback mechanisms. AIAgent agent = new AIProjectClient(new Uri(endpoint), new DefaultAzureCredential()) .AsAIAgent(model: model

No other project uses it yet

MicrosoftAGENTS.md

agent-framework / ag-ui

microsoft/agent-framework/python/packages/ag-ui/AGENTS.md

minus a protected set: tool-approval state, history/context-provider namespaces, message-injection state, standalone FIDES security state, and provider-owned keys. When state is exposed to the model, keep

MicrosoftReads credentialsAGENTS.md

agent-framework / core

microsoft/agent-framework/python/packages/core/AGENTS.md

exports ├── __init__.pyi # Public API typing surface for lazy root exports ├── security.py # Public security primitives, middleware, and tools ├── _agents.py # Agent implementations ├── _clients.py # Chat client base classes and protocols ├── _types.py # Core

MicrosoftAGENTS.md

agent-framework / devui

microsoft/agent-framework/python/packages/devui/AGENTS.md

bash # Run with auto-discovery devui ./agents # Run with specific entities devui --entities my_agent.py ``` ## Security Posture DevUI is a development-only sample app, not a production hosting surface. Authentication

experientiallabsAGENTS.md

experiential

experientiallabs/experiential/AGENTS.md

build that layer themselves, but this boundary must never compromise our gateway's performance, security, or maintainability. Public code, documentation, commit messages, PR descriptions, and comments must describe the standalone

juice-shopAGENTS.md

juice-shop

juice-shop/juice-shop/AGENTS.md

contributing to OWASP Juice Shop. It provides comprehensive guidelines to maintain code quality, security, and adherence to project standards. ## Instruction Precedence & Guidance Layers When multiple instructions or guidance files exist

No other project uses it yet

thunderbirdAGENTS.md

thunderbird-android

thunderbird/thunderbird-android/AGENTS.md

introduce alternative frameworks. ## Coding Requirements Agents MUST: - Make small, focused, reviewable changes - Prioritize privacy, security, and correctness over convenience or shorter code - Modify only files directly related to the requested

qemuAGENTS.md

qemu

qemu/qemu/AGENTS.md

decline the request and refer the user to the project's policy in `docs/devel/code-provenance.rst`. ## Security Policy Before classifying a potential vulnerability, read [`docs/system/security.rst`](docs/system/security.rst) to determine whether it falls within

python-pillowAGENTS.md

Pillow

python-pillow/Pillow/AGENTS.md

with `make doc`. Release notes go in `docs/releasenotes/ .rst` using the existing section structure (Security, Backwards incompatible changes, Deprecations, API changes, API additions, Other changes). Use the `:cve:` RST role

OpenNHPReads credentialsAGENTS.md

opennhp

OpenNHP/opennhp/AGENTS.md

with code in this repository. ## Project Overview OpenNHP is a Go-based Zero Trust security toolkit implementing two core protocols: - **NHP (Network-infrastructure Hiding Protocol)**: Conceals server ports

rabbitmqAGENTS.md

rabbitmq-server

rabbitmq/rabbitmq-server/AGENTS.md

option over the `gh` CLI tool. `gh` can require an explicit operation approval. ## Security `.github/SECURITY.md` describes the security policy. For GitHub Security Advisories, make sure to: * Provide a complete CVSS

No other project uses it yet

The-PR-AgentAGENTS.md

pr-agent

The-PR-Agent/pr-agent/AGENTS.md

mirror of the packaged defaults; some entries have no open-source implementation. ## Security and Configuration Tips - Secrets should be supplied through environment variables (see usages in `tests/e2e_tests/test_github_app.py` and `tests/health_test/main.py

tinacmsAGENTS.md

tinacms

tinacms/tinacms/AGENTS.md

editing. This monorepo contains the core packages, CLI, admin app, and framework example apps. ## Security & Disclosure This repo has a public security policy at [`SECURITY.md`](SECURITY.md). Read it before touching

tinacmsAGENTS.md

tinacms / examples

tinacms/tinacms/examples/AGENTS.md

follow directory symlinks on Windows) | `static/uploads` and `static/blocks` symlinks to `../../shared/public/*` | TinaCMS's `assertWithinBase` security check rejects symlinks that resolve outside the project root, which is why content is accessed

anomalycoAGENTS.md

opentui

anomalyco/opentui/AGENTS.md

files, and required checks. Describe ordinary renderer work as correctness and compatibility testing; reserve security terminology for actual security work. Use concrete scopes such as frame parity, callback ordering, resource

fluentAGENTS.md

fluentd

fluent/fluentd/AGENTS.md

code style; there is no autoformatter to run. CI runs `rubocop`, but only the Security and Performance cops are enabled. - Fluentd runs on Linux, macOS and Windows. CI tests `ubuntu

MetaMaskReads credentialsAGENTS.md

metamask-extension

MetaMask/metamask-extension/AGENTS.md

BaseController architecture **Testing:** Jest (unit), Playwright (E2E) **Build System:** Webpack (with LavaMoat for production) **Security:** LavaMoat policies required for all dependency changes ### Critical Rules for Agents 1. **ALWAYS use TypeScript

nasaAGENTS.md

openmct

nasa/openmct/AGENTS.md

troubleshooting | [TESTING.md](TESTING.md) | | Writing and running Playwright tests, fixtures, CI architecture | [e2e/README.md](e2e/README.md) | | Security policy and vulnerability reporting | [SECURITY.md](SECURITY.md) | | Release process and notable-change policy | [docs/src/process/release.md](docs/src/process/release.md) | | Common coding