Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/asdecided/core/copilot-instructionsgit clone --depth 1 https://github.com/asdecided/coreWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.03534 | $0.03534 |
| Opus 5 | $0.01767 | $0.01767 |
| Sonnet 5 | $0.00707 | $0.00707 |
| Haiku 4.5 | $0.00353 | $0.00353 |
Grade A, and why
core copilot-instructions.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
Copies of this mod
2 near-identical copies found in the catalogue:
- core AGENTS.md — 100% identical, 0 lines differ
- core CLAUDE.md — 94% identical, 25 lines differ
How it starts
The opening of the file, as written. The whole thing — 121 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Settled decisions (AsDecided)
These decisions are already accepted. Do not re-open or contradict them; ask the AsDecided MCP tools (get_artifact, search_artifacts) for the full text before proposing a change that touches one.
- RAC-01K8P7A3M5QZ — ADR-125: Distribute AsDecided as a Local Pilot App (Architecture)
- RAC-01K8Q7MCP407 — ADR-129: Confine Rename Writes to the Corpus Root (Technical)
- RAC-01K8Q7MCP408 — ADR-130: Transactional Rename Application (Technical)
- RAC-01K8Q7MCP411 — ADR-128: Hard MCP Response Budgets (Technical)
- RAC-01K8Q7MCP413 — ADR-127: Attributable MCP Audit Records (Technical)
- RAC-01K8Q7MCP431 — ADR-131: Native Telemetry Is Local-Only (Product)
- RAC-01K8Q7MCP432 — ADR-132: AsDecided MCP Server Identity (Product)
- RAC-KTQ63DPSMF19 — ADR-001 Markdown First
- RAC-KTQ63DPT6008 — ADR-002 AI Optional
- RAC-KTQ63DPVVB37 — ADR-003 Structured Outputs First
- RAC-KTQ63DPWHA4B — ADR-004 Artifact Model
- RAC-KTQ63DPX18Q7 — ADR-005 CLI First
- RAC-KTQ63DPY3ABD — ADR-006 Ingestion Over Rewrite
- RAC-KTQ63DPYKJF4 — ADR-007 JSON Contract Stability
- RAC-KTQ63DPZ42BG — ADR-008 Agent Ready Architecture
- RAC-KTQ63DQ2AEJZ — ADR-010: Documents Are Not Artifacts
- RAC-KTQ63DQ3A5FQ — ADR-011: File-First Pipelines
- RAC-KTQ63DQZ2VSV — ADR-017 — RAC Manages Knowledge, Not Work
- RAC-KTQ63DR3G4YG — ADR-018: RAC Directory as the Canonical Knowledge Root
- RAC-KTQ63DR66AMP — ADR-019: Asset References
- RAC-KTQ63DRA31YC — ADR-020: Requirements as Long-Lived Product Capabilities
- RAC-KTQ63DRET9QV — ADR-021: Templates as Artifact Creation Contracts
- RAC-KTQ63DRPK57V — ADR-023: Clean-Break Internal Refactors
- RAC-KTQ63DRWTN1T — ADR-024: RAC Is Not a Content Store
- RAC-KTQ63DSC8SZW — ADR-027: CI Test Topology — Merge-Gated, Per-Service Batteries (Process)
- RAC-KTQ63DSEK9YG — ADR-028 Explorer Delivery Surface
- RAC-KTW0M8104880 — ADR-029: Guide Delivery Surface (Architecture)
- RAC-KTW0M8184YYT — ADR-030: Guide Tools-Only Surface (Product)
- RAC-KTW0M81B0GBB — ADR-031: Guide In-Process Core Consumption (Architecture)
- RAC-KTW0M81E7TRA — ADR-032: Guide Stateless Reads (Technical)
- RAC-KTW0M81HX5C6 — ADR-033: Guide Response Budget (Technical)
- RAC-KTW0M81MVJ7D — ADR-034: Guide Agent Reasoning Boundary (Product)
- RAC-KTXSTGNKHHVX — ADR-036: Lore Product Identity (Product)
- RAC-KTXTAF6ZKDK8 — ADR-037: Token-Boundary Search Matching (Technical)
- RAC-KTXTAG63E89H — ADR-038: Body-Text Search Tier (Technical)
- RAC-KTY0D0DFTCJA — ADR-039: Lore Server Identity (Product)
- RAC-KTY25D945HYK — ADR-040: Guide Local Telemetry (Product)
- RAC-KTYPAB0HWFJD — ADR-041: Anonymous Usage Ping (Product)
- RAC-KTYXDTB4299E — ADR-042: Documentation Site Hosting (Product)
- RAC-KTYZVKZQWD98 — ADR-043: Watchkeeper Revision Materialization (Technical)
- RAC-KV2E5A5E1F1H — ADR-044: Onboarding Scaffold Writes One Starter Artifact (Product)
- RAC-KV2E5B1122YN — ADR-045: Recency Is Derived From Git, Not Stored In Frontmatter (Technical)
- RAC-KV2E9HYHVV8G — ADR-046: CLI Usage Telemetry (Product)
- RAC-KV2J0GYNCAJF — ADR-047: Agent Operating-Guidance Documents Are Prompt Artifacts (Process)
- RAC-KV4ZAGWPAA6X — ADR-059: Reuse a Single Markdown Parser Instance (Architecture)
- RAC-KV4ZAHVNGH2J — ADR-060: Share Structural Validation Across Per-Type Validators (Architecture)
- RAC-KV5112MVD0AM — ADR-061: Roadmaps Carry an "Achieved" Terminal Lifecycle Status (Architecture)
- RAC-KV5DJYE5FGH0 — ADR-062: The Python SDK's Public Surface Is
rac.__all__(Architecture) - RAC-KV68XJGEXBNB — ADR-064: Multi-Repo Extraction Strategy for the itsthelore Organisation (Architecture)
- RAC-KV6ADYFGC3H4 — ADR-063: Non-Python Clients Are Thin Clients Over the Contract (Architecture)
- RAC-KV6KFBDZ4D23 — ADR-065: Artifact Content Is Untrusted Input; the Trust Boundary Is Human PR Review (Architecture)
- RAC-KV6KFCC8MHTM — ADR-066: Grounding Eval Scoring Is Deterministic — No Embeddings, No LLM Judge (Technical)
- RAC-KV80WX94GY8A — ADR-067: Agent Integration is Context-Supply and Post-Edit Enforcement, Not Pre-Edit Interception (Architecture)
- RAC-KV8WY8XAJ55S — ADR-070: Prompt-Complexity Routing Boundary (Architecture)
- RAC-KV8YZQC7G7NW — ADR-069: Wayfinder — Prompt-Complexity Routing as a Separate Product (Product)
- RAC-KVA44MVMDXXX — ADR-068: Extension, SDK, and Brand Architecture (Architecture)
- RAC-KVJK92SM2A1R — ADR-072: Document Ingestion Parser Is markitdown (Architecture)
- RAC-KVJY1KJEWZ87 — ADR-073: Backend Connectors Are Export-Contract Consumers, Not Per-Provider Repos (Architecture)
- RAC-KVK19NPWFYC9 — ADR-074: The Graph Export Surfaces Typed Relationship Edges (Technical)
- RAC-KVNM01QPBPXB — ADR-075: The Pre-Merge Check Tier Is a Required Merge Gate on
main(Process) - RAC-KVSQ2A0BB9XF — ADR-079: Note-Tool Exports Are Ingested by Normalisation, Not markitdown (Architecture)
- RAC-KVSTYDARXKYW — ADR-080: The Single Source of Truth Is Git, Not a Database (Architecture)
- RAC-KVTS86ZGVJV7 — ADR-077: The Two-Gate Capture Write Model (Architecture)
- RAC-KW2YW6XK593X — ADR-084: Read-Access Audit Recorder (Product)
- RAC-KW47GFBHK31W — ADR-086: Air-Gap Posture and Enterprise Telemetry Hard-Lock (Product)
- RAC-KW47GGS85CKG — ADR-087: External-Reference Relationships (Jira and Beyond) (Technical)
- RAC-KW47GJ749PKC — ADR-088: Enterprise Profile Scaffold (
rac init --profile) (Product) - RAC-KW47GN4SB403 — ADR-090: Enterprise Integration Surfaces and Boundaries (Architecture)
- RAC-KW5A03ZHXN9F — ADR-092: Repository Topology — One Repo Per Concern, rac-* Naming (Architecture)
- RAC-KW6HY8W1CBK6 — ADR-093: Roadmap Intent Lives in the Corpus; Execution Is Tracked in GitHub Issues (Process)
- RAC-KW6NQ4Y814N7 — ADR-094: Roadmaps Are Identified by Stable Codename, Not a vX.Y.Z Scope-Fence (Process)
- RAC-KW8ZTVEQJ366 — ADR-095: rac-connectors Repackage, PyPI Rename, and Outbound Field Rename (Architecture)
- RAC-KWBJJRZR84PT — ADR-096: External-Target Verification Edge (
verified_by) (Technical) - RAC-KWFVA38YT2C0 — ADR-097: Benchmark Family Contract (Technical)
- RAC-KWMW45KXHZJP — ADR-098: Shared HTTP MCP Serving (Architecture)
- RAC-KWMZ3MR9DZ09 — ADR-099: Derived-Index Cache (Technical)
- RAC-KWS4Y9KCTD90 — ADR-103: Unified Derived Read-Model (Architecture)
- RAC-KWS7QCT10Q5A — ADR-104: Persistent Memory-Mapped Index Store (Architecture)
- RAC-KWSDFYW7PCW6 — ADR-105: Event-Sourced Serving Freshness (Architecture)
- RAC-KWSH9J2S7QB1 — ADR-106: Incremental Directory Validation (Architecture)
- RAC-KWSJZJ30EN1J — ADR-107: Parallel Cold Build of the Derived Index (Architecture)
- RAC-KWV0HZ2SSGE2 — ADR-101: Org-Wide Documentation Site Amends Docs Hosting and Repository Topology (Product)
- RAC-KWV63BR8AW71 — ADR-102: Org-Site Brand Direction — Light, Restrained, Site Rhymes With Product UI (Product)
- RAC-KWY0SHYCVY2D — ADR-108: Term-Range-Partitioned Parallel Merge for the Cold Build (Architecture)
- RAC-KWY7886GSEE5 — ADR-109: Tag Search Tier and Tag Facet (Technical)
- RAC-KX04DH293JG8 — ADR-111: Revert to SemVer Release Versioning (Process)
- RAC-KX2WTHEMDEY0 — ADR-112: Cache On by Default, Stat-Proxy Freshness as the Floor (Technical)
- RAC-KX8GEA45HRBM — ADR-113: Capture Writes Arrive Through a Sibling Surface, Not Guide (Architecture)
- RAC-KX9H2M7Q4V8C — ADR-122: OKF v0.2 Is a Truthful Derived Carrier (Architecture)
- RAC-KXBD3T7Q9M2N — ADR-123: Deterministic Decision-to-Code Enforcement (Architecture)
- RAC-KXE0M2QBF2MP — ADR-114: Native Index Workspace Dependencies — memmap2 In, inotify Deferred (Technical)
- RAC-KXFK11FQDN1Y — ADR-115: The Shared Artifact-Spec Registry Both Engines Read (ADR-063 Guard 1) (Architecture)
- RAC-KXGVR299XY5E — ADR-116: The Native Rust Engine Is a Sanctioned Second Implementation Under Lockstep Guards (Architecture)
- RAC-KYVTHFQD44BP — ADR-124: Publish the Native MCP Server Through OCI and the Official Registry (Architecture)
- RAC-KYYC7HBFMRBA — ADR-126: Package the Native MCP Server for Docker's MCP Catalog (Architecture)
- RAC-KZ0F0RG3N5XT — ADR-149: Git Repository Truth Is Forge-Agnostic (Architecture)
- RAC-KZKMJ8WSMFA1 — ADR-134: Declare and Verify an Offline Materialised Parent (Architecture)
- RAC-KZKMJ92ABVJG — ADR-135: Use
corpus.sourceas the Global Corpus Identity (Architecture) - RAC-KZKMJ9DGR69Z — ADR-137: Require Decision-Backed Explicit Federation Overrides (Architecture)
- RAC-KZKMJ9K3AFB2 — ADR-138: Build Federation Through One Source-Aware Read Model (Architecture)
- RAC-KZKMJ9RP0KNV — ADR-139: Rank Federated Retrieval Without Source Preference (Technical)
- RAC-KZKMJ9YA8BRG — ADR-140: Apply Inherited Decisions to Child Code (Product)
- RAC-KZKMJA3YK5Y1 — ADR-141: Add Bounded Federation Provenance to the Existing MCP Surface (Product)
- RAC-KZKMJA9JVF6J — ADR-142: Export the Inherited Layer by Default (Product)
- RAC-KZN54DB1VNPB — ADR-144: Compose Federation as a Bounded Acyclic Source Graph (Architecture)
- RAC-KZN54DB2M7FZ — ADR-145: Declare Multiple Offline Parents Through a Versioned Federation Manifest (Architecture)
- RAC-KZN54DB3V0ZC — ADR-146: Resolve Federated Artifacts by Global Source Identity Without Precedence (Architecture)
- RAC-KZN54DB4QY0R — ADR-147: Permit Decision-Backed Override Chains Across the Federation Graph (Architecture)
- RAC-KZN54DB55X9R — ADR-148: Key Serving State to the Entire Federated Closure (Technical)
- RAC-MCP20260728A — ADR-121: Dual-Era MCP Protocol Compatibility (Architecture)
- RAC-P55FRE5HNE55 — ADR-118: Native Event Freshness Acceleration
- RAC-P61BA5EDE7A0 — ADR-119: Base-Plus-Delta Serving Generations
- RAC-PYRE71RECER7 — ADR-120: Rust CI Uses Contract Fixtures and Live-Corpus Invariants
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 121 lines · 3,534 tokens per session scan A 49cfed60e143
core copilot-instructions.md is an instructions file published in the GitHub repository asdecided/core (292 stars, last pushed yesterday), licensed Apache-2.0. It adds 3,534 tokens to every session, about $0.0177 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
abap_wiki AGENTS.md
Instructions for Gixsy95/abap_wiki, covering agents.md - abapwiki operating contract, 1. identity and mission, 2. language, 3. architecture: the two planes and 4. inviolable rules.
docpull AGENTS.md
Instructions for raintree-technology/docpull: DocPull is the open-source context dependency manager for AI agents. Its core contract is local-first, browser-free by default, reproducible, cited, and budget guarded.
proofpress AGENTS.md
The Governance Layer for Agent-Produced Knowledge.
jdocmunch-mcp CLAUDE.md
Claude Code instructions for jgravelle/jdocmunch-mcp, covering jdocmunch-mcp, standing operational notes (jdoc-specific), standing lessons (suite-wide), release: the two steps that are only written down here and 1. read ci for the pushed sha before any irreversible step.
okf-loom AGENTS.md
Instructions for ojamin/okf-loom, covering agents.md — okf-loom skill, required orientation, what lives where, command baseline and hard rules.
tela CLAUDE.md
Claude Code instructions for zcag/tela, covering claude.md — tela, what tela is, layout, conventions and run / dev.