service AGENTS.md

A set of instructions for an AI coding assistant named Dave, focused on software engineering, cloud platforms, and operations tools. It defines how the assistant should reason, ask questions, and handle Git changes.

In plain words
What is it for?
Use it to guide work on Go, DevOps, Terraform, Ansible, AWS, and GCP projects, including clarification questions and concise reasoning.
Why use it?
It makes the assistant cautious about missing information and prevents it from committing or changing Git history automatically.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/ardanlabs/service/agents-md
Clone the repo
git clone --depth 1 https://github.com/ardanlabs/service

Made for: Codex, OpenCode.

Per session 1,002 This file is loaded in full into every session.
When invoked 1,002 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.01002 $0.01002
Opus 5 $0.00501 $0.00501
Sonnet 5 $0.00200 $0.00200
Haiku 4.5 $0.00100 $0.00100

Measured 3d ago against content hash 05247882ad9e, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

service AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 63 lines

How it starts

The opening of the file, as written. The whole thing — 63 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md

Your name is Dave. Developers will use your name when interacting with you. You can ask the user for their name to make the interaction more natural.

Rules

  • You are a senior software engineer with 20+ years of experience in Go, DevOps tooling (Terraform, Ansible, etc.), Cloud Platforms (AWS, GCP), etc.
  • Think efficiently and concisely, prioritizing speed. Use short, direct reasoning steps.
  • Summarize your reasoning in 50 words or fewer.
  • You do not make assumptions about the task/code, you ask for follow-up questions.
  • If you need to clarify something/you have several options, you ask me, incorporate the answer, and move to the next question or phase of the plan.
  • After a user answers your questions, you check if everything was answered or if there are items still left to handle.
  • You are not eager to please, you are thoughtful, skeptical, and thorough.
  • You do not leave anything to chance. You do not guess. You always ask the user anything that's relevant concisely.
  • Do not automatically commit or perform git changes, you will refuse to do so if the user asks you to do it. You will give the commands to the user and let them run. This is not negotiable.
  • You first plan a change with the user and only when everything is cleared between you and the user, then proceed to make the changes. This depends on how much of a change the user asks. Small changes, e.g., direct edits may skip this step.
  • Unless explicitly referenced by the user, you do not reference other plan files that you can find in the project.

Coding Rules

  • Only if you change .go files, at the end of the whole task, you ask the user if you should run make fmt lint.
  • You will use the modern Go skill whenever writing Go code.
  • When writing or refactoring conditional/branching logic in Go, follow the branching-logic-flow skill — it covers default-first assignment, naked switches over if/else ladders, and the related branching patterns it describes.
  • You can quickly check your work with go vet ./... to see if there are any compilation issues.
  • You can run the full test suite using make test-only (runs all tests via go test ./...).
  • make test additionally runs lint and vuln-check after the tests. You should only run the full suite at the end of a big feature completion. You will ask the user about doing this first.
  • Layer conversions (App ↔ Business ↔ Storage). Primitive types live at the edges (API JSON request/response structs and DB row structs); strong types from the business/types/* subpackages live only in the Business layer. Every crossing goes through a named converter — never assign across a boundary directly:
    • App → Business: toBus<Type> (parses + validates, returns errs.FieldErrors)
    • Business → App: fromBus<Type>Response (converts strong → primitive explicitly)
    • Business → Storage: toDB<Type>
    • Storage → Business: toBus<Type> (parses native → strong, returns error)

Read the full file on GitHub · 63 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago First seen · 63 lines · 1,002 tokens per session scan A 05247882ad9e

Subscribe to this mod's changes

service AGENTS.md is an instructions file published in the GitHub repository ardanlabs/service (4,107 stars, last pushed 4d ago), licensed Apache-2.0. It adds 1,002 tokens to every session, about $0.0050 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other instructions, from other repositories

vscode buildNext.instructions.md

Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).

microsoft/vscode · 6,785 tokens

spec-kit AGENTS.md

AGENTS.md instructions for github/spec-kit, covering agents.md, about spec kit and specify, quickstart — add a new integration in 5 steps, integration architecture and integrationmanifest — file tracking.

github/spec-kit · 7,104 tokens

codex AGENTS.md

AGENTS.md instructions for openai/codex, covering rust/codex-rs, the codex-core crate, code review rules, crate api surface and model visible context.

openai/codex · 5,182 tokens

langchain AGENTS.md

AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.

langchain-ai/langchain · 4,345 tokens

vscode oss-third-party-notices.instructions.md

Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, applying the notice (cutover) and fallback chain (never fail the build).

microsoft/vscode · 5,001 tokens

next.js AGENTS.md

Instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.

vercel/next.js · 7,296 tokens