AgentLoopKit AGENTS.md

Repository instructions for AgentLoopKit, a system that organizes coding work into task contracts, verification reports, reviewer handoffs, and safety policies. An AGENTS.md file tells a coding agent how to work in that repository.

In plain words
What is it for?
Reading the active task, listing and inspecting task contracts, updating task status, checking repository state, and archiving completed work after verification.
Why use it?
It prevents the agent from choosing unclear tasks or skipping the repository's required checks and handoff steps.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/abhiyoheswaran1/agentloopkit/agents-md
Clone the repo
git clone --depth 1 https://github.com/abhiyoheswaran1/AgentLoopKit

Made for: Codex, OpenCode.

Per session 2,127 This file is loaded in full into every session.
When invoked 2,127 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.02127 $0.02127
Opus 5 $0.01064 $0.01064
Sonnet 5 $0.00425 $0.00425
Haiku 4.5 $0.00213 $0.00213

Measured 2d ago against content hash b2ccf9144873, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

AgentLoopKit AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 89 lines

How it starts

The opening of the file, as written. The whole thing — 89 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS

This repository uses AgentLoopKit.

Before changing code:

  • Read AGENTLOOP.md.
  • Check .agentloop/state.json for a pinned active task, then inspect .agentloop/tasks/ for open task contracts.
  • Use agentloop task list to inspect available task contracts before choosing one.
  • Use agentloop task show <path> to read a task contract without changing active state.
  • Use agentloop task set <path> when the active task is ambiguous.
  • Use agentloop task status <path> <status> to update task state without hand-editing Markdown.
  • Use agentloop task done after verification and handoff or ship evidence when the active task is ready to close.
  • Use agentloop task archive <path> only after verification and review evidence are complete.
  • For cleanup batches, run agentloop task archive --status done --dry-run before agentloop task archive --status done.
  • Use agentloop task doctor when old task files or misplaced post-verification gates need a read-only cleanup checklist.
  • Run agentloop status when you need the pinned active task, latest open task, parked deferred tasks, verification, dirty-file, and next-action state.
  • Run agentloop next when you only need the next recommended loop command.
  • Run agentloop doctor --redact-paths before Start when you need to confirm agent-readiness guidance is current.
  • Run agentloop start --for generic --goal implement --redact-paths before broad repo reads when a software agent needs a compact task, evidence, risk, context-budget, and source-handle briefing, and avoid broad repo reads.
  • Run agentloop ready --redact-paths when you need a read-only readiness gate across task, acceptance, verification, scope, forbidden files, and context budget.
  • Use agentloop loop create, agentloop loop tick, agentloop loop run, agentloop loop scorecard, agentloop loop status, and agentloop loop report to record local loop contracts, guarded runner passes, pre-flight decisions, token receipts, iteration decisions, and stop reasons. Use loop run only when the loop contract has an explicit runner command.
  • Run agentloop context handles after Start when the agent needs the available source-handle list, then agentloop context show <handle> to expand exact local source truth.
  • If MCP tools are already configured, call agentloop_start before broad reads. To configure a client, use agentloop mcp-server as that client's stdio command.
  • Run agentloop review-context when an agent needs one read-only snapshot of task, gate, policy, artifact, run, and next-action state.
  • Run agentloop artifacts when you need a read-only inventory of local task, report, handoff, badge, CI summary, release-note, and run evidence.
  • Run agentloop upgrade-harness after updating AgentLoopKit to see whether older generated guidance should be reviewed manually.
  • Run agentloop policy list, agentloop policy show <policy>, and agentloop policy status before touching security, dependency, database, git, public API, or secret-handling areas.
  • Treat local .agentloop/policies/*.md files as the repo's safety guidance. A modified policy is a local decision to review, not a failure.
  • Run agentloop ship before review to score evidence readiness, write a ship report, and record a run under .agentloop/runs/.
  • Run agentloop prepare-pr after ship when reviewers need a PR title, grouped body, risks, rollback notes, and checklist.
  • Run agentloop maintainer-check when evaluating whether an agent-assisted PR has enough evidence to review.
  • Run agentloop runs, agentloop show-run <id>, and agentloop intent <file> to inspect local run history and file intent.
  • Run agentloop check-gates when you need a quick evidence gate without the full ship report.
  • Run agentloop report after verification and handoff or ship evidence when a local HTML evidence artifact helps review.
  • Run agentloop badge when a local SVG evidence badge helps review or CI artifact uploads.
  • Run agentloop ci-summary --write in CI when reviewers need a compact provenance and evidence summary.
  • Run agentloop release-notes --write before a release when reviewers need local release-note evidence.
  • Run agentloop npm-status before claiming npm availability in release notes or docs.
  • Run agentloop release-proof after public release workflows finish before claiming cross-channel release proof.
  • Do not bump package versions, create tags, publish npm, publish GitHub Releases, publish GHCR, or publish MCP Registry entries during active implementation. Prepare releases only when the maintainer explicitly asks for release prep.
  • Follow the Specify, Constrain, Plan, Implement, Verify, Review, Handoff loop.
  • Keep changes small and tied to the task contract.
  • Do not run destructive git or filesystem commands unless the user asks for them.
  • Do not read or print secrets. If env files exist, mention only their paths.
  • Run the configured verification commands before claiming completion.
  • Run npm run dogfood during meaningful AgentLoopKit changes to exercise the local self-check path, including dependency audit. Use npm run dogfood:strict before final handoff or release prep when review-gate warnings should block progress; maintainer-check warnings remain reviewer guidance unless the command exits non-zero.
  • Run npm run maintenance:check for the near-term maintenance guard covering unit checks, public-doc hygiene, link checks, and strict dogfood.
  • Use AgentFlight for meaningful autonomous sessions: npx --yes agentflight start --task "<task>" --yes, npx --yes agentflight status, npx --yes agentflight doctor, and npx --yes agentflight report.
  • After raw agentflight start, run agentloop status --redact-paths and agentloop task doctor --redact-paths. If an AgentFlight placeholder becomes active, treat it as preserved session evidence: run agentloop task clear, then agentloop task set <path> for a detailed task or agentloop create-task for new scoped work. Do not edit or delete the placeholder as default recovery.
  • Use ProjScan during implementation: npx --yes projscan doctor --format markdown, npx --yes projscan start, or a more specific ProjScan command when repo-risk context is needed.
  • Before making product-direction decisions, review .agentloop/product-panel.md, .agentloop/user-personas.md, .agentloop/backlog.md, and the latest files under .agentloop/research/.
  • Treat .agentloop/research/ and product-panel output as simulated internal decision support. Do not present it as real user feedback, adoption, testimonials, or interviews in public docs.
  • Follow .agentloop/harness/autonomous-dogfooding.md for the full AgentLoopKit + ProjScan + AgentFlight dogfood loop.
  • Generate review evidence with changed files, tests run, risks, rollback notes, and reviewer checklist.

Read the full file on GitHub · 89 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 89 lines · 2,127 tokens per session scan A b2ccf9144873

Subscribe to this mod's changes

AgentLoopKit AGENTS.md is an instructions file published in the GitHub repository abhiyoheswaran1/AgentLoopKit (1 stars, last pushed 1mo ago), licensed MIT. It adds 2,127 tokens to every session, about $0.0106 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.