AGENTS.md examples from real projects

WasmEdgeAGENTS.md

WasmEdge

WasmEdge/WasmEdge/AGENTS.md

workflows | | lineguard | `misc-linters.yml` | Trailing whitespace, final newline | | codespell | `misc-linters.yml` | Catches common typos | | CodeQL | `codeql-analysis.yml` | Security analysis | | IWYU | `IWYU_scan.yml` | Include-what-you-use | | Infer | `static-code-analysis.yml` | Static code analysis | | Symbol exposure | `reusable

Chia-NetworkAGENTS.md

chia-blockchain

Chia-Network/chia-blockchain/AGENTS.md

before block inclusion. Fee priority is cost-based. - **35 condition opcodes.** Canonical source: `chia/types/condition_opcodes.py`. ## Security / Anti-Goals - **Never push transactions** (`push_tx`) without explicit user confirmation. - **Never construct spend bundles

FreikaReads credentialsAGENTS.md

dawarich

Freika/dawarich/AGENTS.md

Discussions for larger changes and request review from domain owners (imports, sharing, trips, etc.). ## Security & Configuration Tips Start from `.env.example` or `.env.template` and store secrets in encrypted Rails credentials; never

ChatGPTBox-devDeletes or force-pushesAGENTS.md

chatGPTBox

ChatGPTBox-dev/chatGPTBox/AGENTS.md

with platform-specific build settings ### Cross-Browser Compatibility - Uses `webextension-polyfill` for API compatibility ## Security & Privacy - Do not commit secrets, API keys, or user data - Keep manifest permissions minimal

nextcloudAGENTS.md

all-in-one

nextcloud/all-in-one/AGENTS.md

github.com/nextcloud/.github/blob/master/AI_POLICY.md)** - the primary reference for AI-specific rules, covering disclosure, author accountability, communication, security, licensing, code quality, and autonomous agent behavior. - **[Contribution Guidelines](https://github.com/nextcloud/all-in-one/blob/main/CONTRIBUTING.md)** - covering testing requirements

No other project uses it yet

we-promiseReads credentialsAGENTS.md

sure

we-promise/sure/AGENTS.md

relevant failures and partial responses, with provider/source metadata and family/account-provider context where available. - For securities providers, follow [adding a securities provider](docs/llm-guides/adding-a-securities-provider.md). - For feature rollout, follow [preview-feature gating](docs/llm-guides/gating-a-preview-feature.md

No other project uses it yet

MetaAGENTS.md

hydra

facebookresearch/hydra/AGENTS.md

repo's lint sessions include formatting, import sorting, type checks, style, YAML linting, and security checks. For focused local checks, use the same tools the noxfile runs: - `ruff format .` / `ruff

yugabyteAGENTS.md

yugabyte-db / src

yugabyte/yugabyte-db/src/AGENTS.md

dummy_token`. - **YugabyteDB-internal information not yet public** — unreleased roadmap details, internal SLAs, embargoed security findings, internal infra hostnames. Common leak paths that slip past a scrub of the prose

baptisteArnoReads credentialsAGENTS.md

typebot.io

baptisteArno/typebot.io/AGENTS.md

minimal Playwright shape such as `{ name, value, url: "http://localhost:3000", expires, httpOnly, secure, sameSite }`. - Prefer `http://localhost:3000` over `127.0.0.1:3000` when reusing that auth file, since the saved

woocommerceAGENTS.md

woocommerce

woocommerce/woocommerce/AGENTS.md

independent human review is always required (anything on the High-Impact list, plus security, privacy, data integrity, backward compatibility, and performance-sensitive paths). Two rules matter for agents: - Never present

GoogleReads credentialsAGENTS.md

adk-recipes / genmedia-for-commerce

google/adk-recipes/core/python/genmedia-for-commerce/AGENTS.md

generic one for anything else (log the details). - Browser side: an enforced CSP and security headers outside `/mcp` (`api/security_headers.py`); CORS same-origin unless `ALLOW_ORIGINS` lists origins (`*` is refused

GoogleReads credentialsAGENTS.md

adk-recipes / long-horizon-harness

google/adk-recipes/core/python/long-horizon-harness/AGENTS.md

prefix, prefix cache, the four bounds on context growth), and [`docs/security-model.md`](docs/security-model.md) (per-layer security). Don't duplicate those here — link to them. ## What this recipe teaches Horizon leans